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Mililary  applicatioiiN  ot’ space  for  navigation,  eominiinieation  and  mielligeiKe  impose 
increasing  requirements  on  spacecraft  capacity,  orbit  control  and  pointing  accurasy  i  licsc 
requirements  are  to  be  met  for  a  long  active  lifetime,  with  a  high  sur\ ivabilitc  and  at  lou 
cost.  .\s  the  size  of  the  spacecraft  tends  to  increase  with  capacity,  m  the  near  fiilurc  l.ii.e  ■ 
complex  space  systems  will  be  needed,  that  require  m-orbit  assembh  ami  which  will  le.nl  to 
mechanical  flexibilitv , 

To  meet  the  requirements  for  future  spacecratt  the  perlormaiice  of  existing  compimcnis. 
such  as  actuators  and  sensors,  is  improved  or  new  concepts  are  developed.  In  particular  the 
use  of  microprocessors  and  other  data  distribution  systems  permits  mullilunction.il  use  ot 
various  sensors  or  information  sources  to  produce  eflective.  sun  ivable  systems  at  low  ci'si 
Increasing  on-board  computing  capacity  enables  the  use  ot  sophisticated  sot'tware  lor 
effective  complex  spacecraft  control.  .\  unique  aspect  ttf  large  spacecraft  is  the  control  ol 
the  structural  configuration  in  order  to  acliieve  a  specific  pointing  accuracy. 

*  *  * 

Les  applications  spatiales  a  des  fins  militaires  dans  les  domaines  dc  la  n.uigalion.  dcs 
communications  et  des  renseignements  se  tradiiisent  par  des  exigences  croissantes  an  plan 
de  la  capacite  des  vaisseaux  spatiaux,  du  contrdle  de  leiir  orbite  et  de  la  precision  dii  point.ige. 

II  faut  repondre  a  ces  exigences  en  tenant  compte  de  divers  facteurs;  longue  diirec  dc  \ic 
active,  changes  elevees  de  survie  et  prix  de  revient  modique.  La  taille  des  v.iisscaux  sp.itiaiix 
tetid  a  s'accroitre  avec  leur  capacite;  par  consequent,  dans  un  proche  aienir.  on  iitiliscra  dcs 
syslemes  spatiaux  complexes  et  de  grandes  dimensions  qiii  nccessiteront  un  assemblage  en 
orbite  et  aboutiront  a  unc  souplesse  mecanique. 

Pour  satisfaire  aux  imperatifs  des  futurs  vaisse.iux  spatiaux,  on  amchorc  actuellcment 
les  performances  des  composants  existants.  tcK  que  serxo-eommandes  et  capleurs.  ou  Ton 
developpe  de  nouveaux  concepts,  Le  recours.  en  particulier,  aux  microprocesseiirs  et  .nitres 
systernes  de  distribution  de  donnees  permet  une  utilisation  imiltifonciioiis  des  doers  c.ipieurs 
ou  des  diverses  sources  d'information.  en  vue  de  la  production,  pour  un  coin  modique.  dc 
systernes  efficaces  et  dotes  de  possibilites  de  survie.  L'accroissemeni  dc  la  capacilc  rle  c.ilcul 
embarquee  permet  I'utiUsation  d'un  togiciel  soph'stique  pour  un  coiUrolc  cfficace  el  complexc 
du  vaisseau  spatial.  LTin  des  aspects  uniques  des  vaisseaux  de  grandes  rlimensioiis  cst  Ic  contri'lc 
de  la  configuration  structurale  dans  le  but  de  lealiser  line  precision  tie  point.ige  specili quc. 
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UK 


1.  INTRODUCTION 

1.1  The  37th  symposium  of  the  AGARl)  Guidance  and  Control  Panel  was  held  at  the  Italian  Air  f  orce's  Air  War  College. 
Florence,  27  -30  September  1983.  F'or  the  first  time  the  symposium  dealt  with  spacecraft  problems,  the  topic  being 
guidance  and  control  techniques  for  advanced  space  vehicles. 

1.2  The  subject  has,  of  course,  always  been  an  important  one  in  the  continuing  development  of  space  systems  for  both 
military  and  civil  purposes,  the  major  problems  having  been  to  ensure  a  long  active  life  for  the  spacecraft  at  a  cost  that 
was  affordable  while  responding  to  mission  requirements  which  have  become  more  and  more  demanding  over  the  years. 

In  these  respects  military  and  civil  systems  are  little  different  and  it  is  perhaps  not  surprising  that  the  symposium  papers 
contained  little  of  a  specifically  military  nature  even  though  the  meeting  was  being  held  under  military  auspices.  Another 
factor  here,  of  course,  is  that  the  European  members  of  N.ATO  have  so  far  been  little  involved  in  the  development  of 
military  space  systems. 

1.3  Two  things,  perhaps,  make  the  topic  of  particular  significance  at  the  present  time  first,  the  increasing  trend  to 
ever  larger  spacecraft  with  a  multiplicity  of  appendages  I  large  solar  arrays,  large  antennas  and  so  on)  and  second  the 
impending  deployment  of  large  space  stations  assembled  piecemeal  in  orbit,  with  the  attendant  need  to  develop 
rendezvous  and  docking  techniques.  Large  structures,  with  their  mechanical  fiexibiliiy.  present  particular  problems  to 
the  control  engineer  and  control/ structure  interaction  (CSI)  is  a  driving  force  in  many  current  programmes  and  figured 
largely  in  the  papers  presented.  At  the  same  time  the  massive  leaps  forward  that  have  taken  place  in  electronics  tech¬ 
nology.  and  which  are  continuing,  have  made  it  possible  to  contemplate  the  use.  at  reasonable  mass,  volume,  power 
level  and  cost,  of  intelligent  on-board  systems  with  sophisticated  and  adaptable  software  which  can  ensure  that  effective 
guidance,  control  and  stability  is  maintained.  It  was  the  objective  of  the  symposium  to  e.xamine  such  general  issues  us 
these, 

1.4  The  programme  listed  25  papers  in  addition  to  the  Keynote  Address.  Of  these,  three  were  not  presented,  in  one 
case  a  substitute  paper  being  given  by  the  Session  C  hairman,  and  one  additional  paper  was  inserted  into  the  programme. 
There  were  six  technical  sessions. 


2.  OPENING  CERE.MONY  AND  KEYNOTE  ADDRESS 

2. 1  Opening  Ceremony 

2.1.1  Following  initial  remarks  by  Mr  R.S. Vaughn,  Chairman  of  the  Guidance  and  Control  Panel,  the  symposium  was 
formally  opened  by  Major  General  G. A. M. Marconi,  the  Italian  National  Delegate  to  ,'\G.\R1).  He  stressed  the  importance 
generally  of  AGARD  as  a  collaborative  method  of  producing  the  technology  required  for  military  operations  and  under¬ 
lined  the  importance  of  the  symposium  topic  as  a  key  factor  in  the  design  of  spacecraft.  General  I).  A.L.Meloni. 
Commandant  of  the  Air  W'ar  College,  who  followed,  also  noted  the  importance  of  guidance  and  control  techniques  in 
spacecraft  design  and  the  need  to  develop  low  cost  and  effective  solutions  to  the  many  problems,  Mr  R.K. Geiger, 
Director  of  AGARl),  presented  the  thanks  of  AGARl)  to  the  Italian  Air  Force  and  to  the  Air  W  ar  College  for  their 
efforts  in  staging  the  meeting  and  for  their  hospitality.  He  pointed  to  the  many  opportunities  available  for  collaborative 
research  in  the  general  field  of  space  systems  for  military  purposes,  noting  that  the  capabilities  of  these  systems  were 
such  as  to  provide  for  the  needs  of  more  than  one  group.  Symposia  such  as  the  present  one  were  valuable  in  exposing 
new  lines  of  thought;  the  papers  presented  were  important,  but  the  opportunities  available  for  discussion  and  for  the 
making  of  contacts  with  other  experts  were  probably  more  so. 

2.1.2  The  meeting  was  then  handed  over  to  the  Technical  Chairman.  Mr  P.  Ph.  van  den  Brock,  troni  the  Hepartment  c'l 
Aerospace  Engineering  at  the  Delft  University  of  1  echnology.  who.  before  introducing  the  keynote  address  speaker, 
commented  on  this  being  the  first  meeting  of  the  Guidance  and  Control  Panel  on  space-relaterl  topics.  It  was  a  limeK 


meeting,  given  the  inereasing  imporlaiKe  ot  space  systems  in  military  operatums.  and,  nt  the  man\  laeels  cil  sp.iee 
technology,  guidance  and  control  technii.|ues  were  an  important  element. 


The  Keynote  .\ddress 


2.2.1  In  the  absence  of  Mr  Dell  I'.W  illiams  111  l  Lockheed  .Missiles  and  Space  Co.  Inc. )  w  ho  had  been  llie  nominated 
speaker,  the  keynote  address  was  given  by  Mr  R.J.llerzberg  lof  the  same  organisation).  Mr  ller/berg  introduced  himself 
as  a  generalist  in  space  technology  he  was  responsible  for  space  technology  planning  at  l.ockheeds  and  not  as  an  expert 
in  guidance  and  control  techniques,  which,  nevertheless,  he  saw  as  one  of  the  critical  areas.  Space  was  now'  twenty-five 
years  old  and  a  first  and  fundamental  question  that  had  to  be  answered  at  the  present  time  was  whether  further  advances 
and  e.xtensions  were  required.  N.\S.\.  the  US  .\ir  l  orce  and  the  LfS  aerospace  firtns  were  all  concerned  in  these  matters 
but  looking  ahead  to  what  was  necessary  was  difficult  since  evidently  for  financial  reasons  all  the  possible  programmes 
could  not  go  ahead,  lie  cited  a  number  of  the  more  important  future  programmes  and  identtfied  the  two  stgnificant 
control  technology  issues  as 

(a)  the  need  for  the  active  suppression  of  tlexible  modes  in  large  satellites  and 
space  stations  of  the  future 


and 


(b)  the  need  for  increasing  on-board  autonomy. 


Of  these,  the  first  was  the  more  difficult  and  the  whole  business  of  control/structiires  interaction  was  currently  a 
strong  research  area.  A  NASA  committee  had  concluded  that  a  number  of  future  missions  would  suffer  serious  con¬ 
straints  if  new  techniques  were  not  developed.  .As  to  antonorny,  he  felt  that  on-board  navigation,  station  keeping  and 
control  was  mainly  needed  by  military  systems,  reducing  as  they  did  the  ground  stations’  costs  and  adding  to  the  protec¬ 
tion  of  spacecraft  in  orbit. 


2.2.2  He  then  went  on  to  point  out  the  dilemma  of  the  programme  planner  the  problem  generally  of  deciding  which 
technologies  were  flight  ready,  providing  minimum  risk  at  reasonable  cost  and  noted  the  conHicting  views  of  the 
programme  managers  (pessimists  who  preferred  to  rely  on  well  proven  techniques)  and  the  research  engineers  and 
scientists  (optimists  with  confidence  in  the  new  approaches). 

2.2.3  Returning  to  the  problems  of  flexible  body  control,  he  emphasised  the  need  for  good  modelling  but  also  the 
necessity  to  be  able  to  reduce  the  complexity  of  the  model,  retaining  only  the  essential  system  parameters.  Currently, 
the  three  areas  of  expertise  -  control  technology,  computer  technology  and  structural  design  were  separate  disciplines 
and  he  foresaw  a  new  type  of  engineer  emerging  by  the  end  of  the  decade  with  the  ability  to  apply  all  three. 


3.  FIRST  TECHNICAL  SESSION 

3.1  The  session  was  chaired  by  Mr  van  den  Broek  and  was  entitled  'Review  of  Mission  Requirements  and  1  echnology 
Issues’. 

3.2  The  first  paper,  'Spacecraft  Control  Research  at  .V/l-V/l  ’  (Paper  1 )  was  presented  by  Mr  J  B.Dahlgren  and  provided 

an  outline  of  what  were  considered  in  NASA  to  be  the  basic  problems  in  the  control  and  guidance  of  future  space  vehicles. 
These,  in  general,  related  to  the  need  to  control  spacecraft  which  would  be  both  large  and  tlexible.  As  far  as  theory  was 
concerned,  a  number  of  deficiencies  had  already  been  identified  and  these  were  being  investigated.  There  was  also  the 
problem  of  the  large  structure  where  multiple  sensors  and  actuators  were  required  to  maintain  the  configuration.  In  the 
field  of  adaptive  control,  techniques  were  being  investigated  for  application  to  structures  where  unknown  or  changing 
parameters  might  require  modifications  to  the  control  system  design.  The  space  station  was  a  good  example  of  this. 
Assembled  step  by  step  in  orbit,  its  mass  would  change,  its  centre  of  gravity  move,  there  would  be  varying  external 
torques  and  vibration  modes  would  alter  throughout  its  life.  The  conventional  approach  -  rigid  body  with  tlexible 
appendages  as  applied  to  Skylab  and  the  Shuttle  might  suffice  for  the  initial  configuration  but  as  the  station  grew  the 
structural  dynamics  would  make  an  increasing  degree  of  adaptive  control  necessary.  The  required  theoretical  base  thus 
had  to  be  established.  As  far  as  spacecraft  technology  was  concerned  the  current  programme  dealt  with  large  antennas 
and  with  the  requirements  of  submillimetre  and  infra-red  astronomy  satellites.  However  it  was  clear  that  there  were 
future  requirements  which  called  for  several  orders  better  surface  shape  and  pointing  accuracy.  There  was  also  the  probleni 
of  the  large  deployable  reflector  for  astronomical  observation  to  satisfy  the  requirements  it  would  he  necessary  to 
measure  the  position  and  orientation  of  each  section  of  the  antenna  and  to  control  these  quantities  with  very  high 
precision.  There  was  need  therefore  In  this  and  other  applications  for  a  very  accurate  shape  determination  system  and 
for  control  actuators.  Returning  to  the  control  of  flexible  structures,  the  limitations  of  ground  experiment  were  noted 
and  hence  the  need  arose  for  flight  experiments  a  series  of  such  experiments  in  the  late  bOs  and  early  'His  were  currently 
being  planned  together  with  a  set  of  ground  tests  for  comparison. 

3.3.  I  he  presentation  and  even  more  so  the  paper  itself  which  became  available  later  in  the  week  of  the  syniposiuni 
covered  a  great  deal  of  ground  and  illustrated  the  major  problems  which  will  have  to  be  overcome  in  controlling  the  large 
flexible  sp  icecraft  of  the  future  There  was  a  brief  discussion  period  during  which  the  problem  of  control  in  the  presence 
ol  propellant  sloshing  w  as  identified  as  another  area  of  difficulty. 
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3.4  The  final  paper  (Paper  2)  of  the  session,  hy  C'ongnet  and  Solla.  dealt  with  the  role  ol  on-hoard  intelligenee  and  in 
orbit  servicing  as  means  of  increasing  the  lifetime  of  satellites,  .\fter  listing  the  normal  limitations  to  satellite  lile  ami  a 
number  of  possible  remedies,  the  paper  went  on  to  consider  in  very  general  terms  the  two  topics  selected. 

3.5  -Vs  to  the  first,  the  high  reliability  of  modern  micro-computers  having  been  noted,  their  uses  in  a  number  of  on-board 
tasks  were  e.\amined  power  control  and  distribution,  thermal  control,  propellant  management,  the  monitoring  of 
sensor  performance,  the  adaptation  of  control  laws  as  the  e,\ternal  environment  changes,  data  management  and  so  on. 
Potential  gains  were  listed  as  well  as  the  problems  the  need,  for  e.xample.  to  account  for  the  reliability  of  the  micro¬ 
computer  itself  and  of  the  cost  of  the  on-board  intelligence. 

3.6  The  authors  then  went  on  to  discuss  the  use  of  on-orbit  servicing  in  such  matters  as  re-fuelling,  repair  and  replace¬ 
ment  of  subsystems  and  the  modification  of  the  payload  as  mission  needs  changed  with  time.  1  he\  pointed  to  this  as 
an  attractive  and  He.xible  solution  but  also  noted  the  inherent  difficulties  and  the  need  to  develop  a  wide  range  of  new 
techniques  and  systems  rendezvous  and  docking,  robotics,  the  service  vehicle  itself  and  so  on  as  well  as  to  take 
account  of  the  implications  of  servicing  on  the  design  of  the  satellite  itself.  The  question  of  man’s  presence  was  considered 
brieHy. 

3.7  There  was  very  little  time  for  discussion  and  the  only  question  brought  out  that  the  authors  were  thinking  in  terms 
of  satellite  life  times  in  the  range  15  to  20  years.  The  paper  was,  in  fact,  a  very  general  one  but  at  least  it  conveniently 
listed  the  problems  to  be  solved  and  the  potential  and  difficulties  of  the  two  methods  of  solution  postulated. 

4.  SECOND  TECHNICAL  SESSION 

4.1  This  was  entitled  ‘Control  Components’  and  dealt  largely  with  existing  technology.  One  of  the  papers  advertised  on 
the  programme  (Peacekeeper  Missile  Thrust  Vector  Control  System)  was  not  given  but  an  additional  paper  by  staff  of 
Ferranti,  UK  on  their  current  work  on  space  gyros  was  presented,  immediately  following  a  similar  paper  by  staff  of 
SAGEM,  France, 

4.2  The  first  paper  (Paper  3 )  by  Bourcier  and  Vite  of  SODERN,  France,  considered  the  relative  merits,  as  used  in  star 
sensors,  of  image  detector  tubes  and  charge  coupled  devices,  taking  as  an  example  of  the  former  the  family  of  sensors 
developed  for  use  in  Exosat  and  the  Spacelab  Instrument  Pointing  System  (IPS).  The  particular  sensor  developed  for 
the  IPS  was  described  in  some  detail  and  its  main  characteristics  as  determined  by  experiment  were  given.  The  paper 
compared  the  performance  of  the  image  dissector  tube  with  that  of  a  particular  RCA  charge-coupled  device,  examining 
generally  the  three  parameters  -  angular  resolution,  acquisition  time,  and  field  to  accuracy  ratio  -  as  well  as  their  con¬ 
venience  in  use.  As  usual  in  such  comparisons  there  were  pros  and  cons  either  way  and  no  clear  preference  emerged. 

4.3  There  was  unfortunately  no  time  for  questions  or  discussion. 

4.4  Two  papers  followed  on  the  subject  of  space  gyros.  The  first  of  these  (Paper  4)  by  Resseguier  and  Monier  of  SAGEM, 
described  in  some  detail  the  characteristics  of  the  SAGEM  floating  gyros  F06  and  GYPSE  which  have  already  been  used 

or  are  intended  for  use  in  a  number  of  European  space  programmes  and  also  those  of  the  dry  tuned  gyros,  GILDAS  1  and  3. 
of  which  the  space  use  had  been  the  subject  of  recent  study.  A  broad  conclusion  of  a  comparison  of  the  two  types  was 
that  the  dry  tuned  gyros  had  the  greater  potential  provided  that  the  production  techniques  already  established  for  other 
applications  did  not  have  to  be  modified  to  any  great  extent.  In  passing  it  was  noted  that  laser  gyros  were  not  greatly 
favoured.  The  paper  concluded  with  a  study  of  the  optimum  geometry  of  a  gyro  sensor  cluster,  together  with  some 
mention  of  the  value  of  coupling  star  sensors  with  the  gyro  package. 

4.5  The  discussion  that  followed  raised  one  or  two  questions  of  fact  and  also  underlined  the  .SAGEM  view  that  the 
greatest  potential  in  the  immediate  future  lay  with  the  dry  tuned  gyro.  It  was  felt  that  perhaps  20  years  hence  the  laser 
gyro  could  come  into  use.  The  paper  itself  was  labelled  ’NATO  Confidential’.  It  is  a  little  difficult  to  see  what  the 
military  security  implications  were  and  there  appeared  to  be  little  in  the  paper  that  would  not  have  been  published  in 
the  standard  Company  brochure. 

4.6  The  paper  that  followed  (Paper  7).  an  addition  to  the  published  programme,  was  presented  by  Mr  Wellburn  and 
discussed  current  work  at  Ferranti,  UK,  on  high  grade  space  gyros.  Although  most  US  companies  had  switched  Irom 
floated  gyros  to  dry  gyros,  Ferranti’s  view  was  that  the  former  were  worthy  of  continued  development  and  improvement. 
The  Type  125  had  been  much  used  and  successfully  so  in  a  number  of  European  spacecraft  and  launch  vehicle  pro¬ 
grammes  and  laboratory  tests  of  the  lifetime  of  such  ball-bearing  gyros  confirmed  their  suitability  for  long  space  missions. 
The  Type  1  26,  gas  bearing  gyro,  on  which  Ferranti  had  also  worked,  while  suitable  tor  many  aircralt  and  launcher 
applications,  was  still  not  capable  of  achieving  the  performance  of  the  best  floated  gyros. 

4.7  In  a  brief  question  time,  the  Ferranti  view  that  the  technology  of  fibre  optic  gyros  had  still  a  long  way  to  go  was 
brought  out.  It  was  generally  interesting  in  relation  to  both  the  .S.AflEM  and  Ferranti  presentations  that  there  was 
strong  belief  in  the  reliability  of  ball  bearings  and  that  such  mechanical  devices  had  a  long  life  ahead  in  space  applications. 
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4.8  The  next  paper  hy  Hatev,  Sehell  aiiJ  (  ouraii.'  (Paper  i  i.le>eril'eil  a  I.Kili-ti'leraril  vp.ieebiinie  eiMupiiiei  ^levell'p^.^l 
by  the  Raytheon  (  oinpany  tor  the  I  SM-  and  [ntendei.1  to  meet  the  on-tmaiil  eompnlaljonal  and  Mir\ i\ al'ilil\  neeiN  I'l 
space  missions  in  the  IdSd  to  tmietrame  It  had  not  \o  tar  been  iiNed  lor  a  space  application  but  the  Ieclinn]nes 
employed  had  been  utilised  on  computers  used  by  the  I  S  \rmy.  I  he  paper  v^as  presented  uilli  the  aal  id  a  uselul  lilm. 
The  computer  was  described  as  having  been  designed  to  support  a  variety  ot'  space  missions  w  ith  a  ds  probabiluy  ol 
surviving  without  performance  degradation  for  5  to  "  years.  It  was  segregated  into  a  number  of  functional  elements, 
each  of  which  was  described  in  some  detail  in  the  paper,  w  ith  each  element  protected  by  at  least  one  spare  In  addition 

a  number  of  these  elements  was  provided  w  ith  internal  redundancy  through  the  use  of  what  were  called  Rippler  switches 
these  were  a  key  new  feature  in  the  design.  The  capability  of  the  computer  for  self-adjustment  Icdlowing  internal  faults 
or  radiation  events,  its  value  for  autonomous  control,  the  consequent  relaxation  of  ground  station  requirements  and  Us 
ability  to  be  reprogrammed  simply  from  the  ground  were  all  stressed.  It  was  strongly  urged  that  this  was  not  just  a  paper 
computer  but  that  extensive  testing  had  proved  its  worth. 

4.9  In  discussion  the  question  of  fault  tolerant  software  was  raised.  The  speaker’s  view  was  that  full  fault  tolerance 
in  software  was  extremely  difficult  to  achieve  and  there  was  still  no  substitute  for  very  careful  design  and  checking  of 
programs.  In  answer  to  another  question  on  the  effect  of  radiation,  the  speaker  outlined  the  many-faceted  approach 
the  protection  of  memories  using  error  correcting  codes  and  the  simple  expedient  of  periodical  memory  checks,  for 
example,  as  well  as  the  technique  of  recovering  from  short  power  breakdowns  the  ROM  could  be  used  to  establish  the 
position  at  breakdown  and  lead  to  a  resumption  of  computation.  The  key  role  of  the  rippler  switches  was  protected  In 
making  them  as  simple  as  possible.  In  all  this  was  an  interesting  and  well  presented  paper,  only  lacking  in  the  fact  that 
no  space  use  of  the  device  had  yet  occurred. 

4. 10  The  session  ended  with  a  presentation  by  Dr  W.Auer  of  TKLDIX  (Paper  6)  on  a  double  girnballed  momentum 
wheel  for  precision  three-axis  attitude  control.  The  paper  was  well  presented  and  contained  a  detailed  technical 
description  of  the  device,  its  general  principles  of  operation  and  an  outline  of  the  system  tests  carried  out  by  DTVLR. 

The  most  critical  subassembly  was  identiiied  as  the  ball  bearing  unit  but  here  again,  as  in  the  case  of  the  gyros,  there 
was  every  confidence  in  its  reliability  and  life-time  in  space  applications.  The  main  message  was  that  here  was  a  device 
which  had  been  developed  and  qualified  for  space  use  and  it  was  available.  There  were  no  questions. 

4. 1 1  The  session  was  perhaps  a  little  disappointing  in  that  it  confined  itself  to  descriptions  of  currently  existing  equip¬ 
ment  and  provided  little  more  than  could  be  found  in  contractors  brochures.  Greater  emphasis  on  possible  future 
developments  in  the  field  of  control  components  would,  it  is  felt,  have  enhanced  the  worth  of  the  session.  Apart  possibly 
from  the  paper  on  the  fault-tolerant  computer,  which  of  course  may  have  been  new  only  to  Turopean  ears,  there  was 
little  of  a  thought-provoking  nature. 

5.  THIRD  TECHNICAL  SESSION 

5. 1  This  session  was  chaired  by  Dr  A.J.Sarnecki  of  the  Royal  .Aircraft  Establishment.  UK,  and  was  entitled  Tistimation 
and  Control’.  The  programme  listed  five  papers;  four  only  were  presented,  the  fifth,  by  Turci  et  al.  (on  attitude  control 
and  stabilisation  techniques  for  advanced  communication  spacecraft  utilizing  an  on-board  processor)  having  been 
apparently  withdrawn. 

5.2  The  first  paper  (Paper  8)  by  Passeron  and  Bozzo  considered  the  problem  of  overcoming  unobservability  in  three- 
axis  stabilization  of  satellites,  taking  as  their  model  the  well-known  geostationary  three-axis  stabilised  satellite  using  the 
pitch  momentum  concept.  Thus  the  satellite  comprised  a  central  body,  with  rigid  appendages  and  a  sun  pointing  solar 
array,  and  a  fixed  momentum  wheel  along  the  pitch  axis.  The  on-board  sensors  consisted  of  an  infra-red  sensor  providing 
noisy  measurements  of  pitch  and  roll  and  a  sun  sensor  providing,  once  or  twice  per  orbit,  noisy  measurements  of  yaw. 

The  promise  was  that  in  future  spacecraft  much  more  accurate  control  in  both  yaw  and  roll  woidd  be  required.  The 
objective  of  the  paper  was  to  demonstrate  how  this  could  be  accomplished,  without  an  accurate  yaw  sensor,  by  including 
in  the  spacecraft  model  a  representation  of  the  expected  roll  and  yaw  torques.  These  were  represented  by  truncated 
Fourier  series,  the  fundamental  frequency  being  that  of  the  Earth’s  rotation.  With  that  built  into  the  design  of  the  filter, 
it  appeared  from  their  simulation  results  that  a  marked  improvement  could  be  achieved  in  both  roll  and  yaw  angle  control 
with  only  moderate  fuel  consumption.  The  analysis  presented  in  the  paper  dealt  only  with  the  first  term  in  the  I'ourier 
series  but  it  was  stated  that  the  method  could  be  readily  adapted  to  take  account  of  higher  harmonics. 

5.3  In  answer  to  questions  it  was  agreed  that  if  the  fundamental  frequency  was  wrongly  estimated,  then  the  method 
would  be  in  difficulty.  It  was  not  possible  to  extend  the  technique  to  cover  pitch  angle  control  (agreed  not  to  he  too 
much  of  a  problem  in  any  case)  since  the  pitch  torque  had  discontinuities  although  the  question  had  been  looked  at  in 
a  recent  response  to  an  E.SA  study. 

5.4  The  next  three  papers  all  considered  various  aspects  of  optics-inertial  systenis  for  the  estimation  of  spacecraft 
attitude.  The  first  paper  (Paper  9 )  by  .Amieux  and  Claudinon  essentially  summarised  five  years  of  research  al  Matra  on 
the  subject,  during  which  time  the  general  concept  has  been  refined  and  improved.  After  nitroducing  the  general 
principles  of  the  technique,  listing  the  various  sensors  (infra-red  Earth  sensors,  sun  sensors,  star  scanners  and  trackers 
and  ladiofrequency  sensors)  which  could  be  used  in  concert  with  the  gyro  package,  the  authors  went  on  to  consider 
three  specific  case  studies.  The  first  concerned  a  large  geostationary  communication  satellite  (work  carried  out  for 


Intelsat)  where  there  was  a  need  for  a  direct  yaw  measurement.  Hie  attitude  measurement  a^^eml'ly  comprised  in  iiilr.i- 
red  liarth  sensor,  a  three-component  gyro  pack  and  a  digital  sun  sensor.  Results  of  simulations  demonstrated  a  successt  ul 
design  with  yaw  being  controlled  within  0.0.^°.  The  second  example  (work  forCM  Si  related  to  an  Tarth  ohseivation 
satellite  of  the  SPOT  type  (in  low  sun  synchronous  orbit)  where  an  assembly  comprising  a  star  mapper  and  a  si\-gyro 
set  had  enabled  attitude  control  to  be  maintained  within  ten  arcsec.  Tinally  the  problem  ol  the  state  estimation  ol  a 
flexible  spacecraft  where  the  auxiliary  sensors  comprised  an  infra-red  Tarth  sensor  and  a  radio  freiiuency  sensor  was 
currently  under  study.  .X  number  of  satellite  missions  already  using  the  concept  or  being  designed  to  do  so  t  T  \osat. 
SPOT,  Hipparcos)  were  noted.  The  authors  concluded  with  outlines  of  the  possible  application  of  the  technii|ue  to  the 
two  problems  of  autonomous  station  keeping  and  on-board  relative  trajectory  estimation  during  a  low  Tarth  orbit  rendez¬ 
vous,  both  of  them  interesting  problems  for  the  future. 

5.5.  Dr  M. Noton  of  British  .Xerospace  Dynamics  Group  in  his  paper  (Paper  1 0)  which  followed,  gave  a  progress  report 
on  a  UK  collaborative  project,  F.XDS  (filtered  attitude  determination  system),  where  the  measurement  system  was  based 
on  a  gyro  package  and  a  star  crossing  detector  which  was  expected  to  be  lighter  and  less  power  consuming  than  the  more 
usual  star  tracker.  The  project  involved  collaboration  between  B.XeDG  (system  studies,  microprocessor  sol  (ware  and 
hardware),  MSDS  (star  sensor  development  and  system  assembly,  integration  and  test),  and  Terranti  ig>  ro  development 
and  testing)  and  the  immediate  aim  was  to  demonstrate  the  system  at  breadboard  level.  An  important  feature  was  com¬ 
patibility  with  ESA’s  modulator  attitude  control  system  (MAC'S).  Later  work  would  be  aimed  at  a  future  system  for 
flight  application.  Thus,  for  example,  the  computer  chosen  for  the  breadboard  demonstration  (Intel  XOS(i)  would  be 
replaced  by  a  flight  qualified  device.  The  paper  discussed  the  star  crossing  detection  design  based  on  the  T'airchild  1 
element  CCD  array,  the  choice  of  on-board  processing  for  the  star  tables,  results  of  recent  tests  by  Terranti  on  the  Type 
125  gyro  as  well  as  outlining  the  derivation  of  the  filter  algorithm,  made  more  difficult  in  this  case  by  the  intermittent 
nature  of  the  information  provided  by  the  star  crossing  detector.  The  system  appeared  to  be  suitable  for  either  near- 
Earth  or  geostationary  Earth  pointing  satellites  providing  a  pointing  accuracy  of  the  order  of  two  arcsec.  Euture  develop¬ 
ments  of  the  system  were  expected  to  consider  the  use  of  star  trackers  or  radio  frequency  sensors. 

5.6  The  final  paper  of  the  three  (Paper  1 1 )  by  Zwartbol  and  Terpstra  of  NLR,  Netherlands,  discussed  similar  work  at 
NLR  on  inertial-optical  attitude  determination  and  the  use  of  model  following  for  the  control  of  manoeuvring  spacecraft. 
The  control  system  considered  in  the  paper  consisted  of  a  strap-down  rate  integrating  gyro,  a  star  slit  sensor  and  a  reaction 
wheel  actuator  supported  by  an  on-board  computer.  The  paper  considered  in  turn  the  control  law,  based  on  a  simplified 
spacecraft  model,  and  algorithms  for  spacecraft  state  determination  and  for  the  estimation  of  gyro  parameters.  Software 
simulation  had  indicated  the  satisfactory  performance  of  the  algorithms,  but  of  much  more  interest  had  been  the  fact 
that  the  control  law  and  spacecraft  state  estimator  had  been  tested  in  flight  using  the  Infra-red  Astronomy  Satellite 
(IRAS).  The  algorithms  had  been  loaded  from  the  ground  into  the  IRAS  computer  and  control  had  been  taken  over 
from  the  existing  system.  Satisfactory  performance  had  been  demonstrated  though  there  had  been  some  discrepancies 

as  compared  with  the  ground  simulation.  These  were  in  fact  simply  explained  by  a  mismatch  in  the  moment  of  inertia 
of  the  spacecraft  model  and  by  a  delay  between  the  sampling  instant  and  the  issue  of  a  new  command  which  had  not 
been  incorporated  in  the  simulation.  This  was  an  interesting  experiment,  a  real  test  of  the  system  with  a  real  satellite, 
and  much  more  convincing  than  simulation  where  one  is  generally  testing  the  system  designed  in  relation  to  the  model 
assumed  for  the  design. 

5.7  For  the  purpose  of  questions,  the  three  papers  were  grouped  together  and  a  good  discussion  ensued,  within  the 
time  available.  This  is  an  interesting  subject  and  the  general  technique  of  mixed  inertial  and  other  sensors  has  already 
found  application  in  a  number  of  satellite  programmes  and  will  continue  to  do  so.  The  papers  formed  a  useful  addition 
to  knowledge  of  the  subject. 


6.  FOURTH  TECHNICAL  SESSION 

6.1  This,  chaired  by  Tl.Radet,  Erance,  was  entitled  ‘Orbital  Manoeuvring’.  Five  papers  were  presented  in  a  slightly 
different  order  to  the  published  programme. 

6.2  The  first  of  these  (Paper  1 4)  by  Natenbruk  and  Rangnitt  considered  some  of  the  control  problems  of  space 
rendezvous  as  brought  out  by  digital  simulations.  The  paper  noted  the  increasing  interest  in  the  topic  with  the  beginning 
of  the  operational  use  of  both  the  Space  Shuttle  and  Ariane  and  referred  to  three  specific  cases  the  demonstration 

of  a  rendezvous  and  docking  (RVD)  capability  in  low  Earth  orbit  using  the  Shuttle,  the  attachment  of  an  apogee 
motor  to  a  Comsat  in  geostationary  transfer  orbit  using  Ariane  3  and  the  assembly  in  geostationary  orbit  of  a  modular 
Comsat,  using  Ariane  4.  The  main  business  of  the  paper,  however,  was  to  describe  the  simulation  programme  which 
dealt  with  the  final  phase  of  the  rendezvous,  the  early  phases  being  assumed  to  be  dealt  with  by  ground  station  control, 
and  an  outline  was  given  of  the  flexibility  of  the  programme  in  dealing  with,  for  example,  different  control  laws 
(constant  bearing  courses  or  pursuit  courses)  and  with  the  problem  of ‘the  last  few  metres’.  Two  particular  examples  of 
different  ways  of  dealing  with  the  final  approach  problem  were  discussed.  It  was  clear  that  further  work  still  remained 
to  be  done  to  arrive  at  the  best  solutions  to  the  problem  but  evidently  the  simulation  progranmie  which  had  been 
devised  was  an  essential  tool  in  further  study. 

6.3  The  second  paper  (Paper  I  3)  by  Ancillotti  and  C’assi,  dealt  with  the  effect  of  sensor  and  thruster  imperfections  on 
the  attitude  and  position  of  a  spacecraft  performing  a  rendezvous.  The  particular  case  examined  was  that  of  rendezvous 


in  geostationary  ortnt,  the  target  lieing  a  rigat  spaoeeralt  eontrollej  Iroin  the  grounti  Init  ei| uipia-il  w  iili  laser  radar 
instriiineatation  and  the  ehaser  a  rigid  three-axis  stabilised  spaeeeral't  wiili  an  optieal  teleseope.  eoriier  lel  leelois  and  a 
siin  sensor  tor  attitude  ineasurenient.  The  paper  developed  in  turn  the  mat heinatieal  model  ol  the  system,  the  po^illoll 
and  veloeity  eontrol  laws,  the  ehaser  attitude  eontrol  laws  and  the  ehaser  position  and  atlitikle  iiieasiiremenl  leehm(|ue 
and  then  went  on  to  examine  the  elYeet  of  sun  sensor  errors  and  thruster  misalignment  on  the  rende/voiis  maiioeuMe. 

The  sensor  errors  assumed  appeared  to  have  little  impaet,  with  position  and  veloeity  measurement  errors  being  more 
signifieant.  I'he  need  to  mateh  the  thruster  minimum  impulse  to  the  sensor  errors  w  as  stressed. 

6.4  I  he  third  paper  ( Paper  1  2 )  by  (lampe,  turned  from  the  realm  of  theory  trr  the  irraetieal  vlesign  of  a  doeking 
meehanism  for  in-orbit  assembly  and  spaeeeraft  servicing.  I'he  docking  mechanism  subsystem  was  ol'  course  recogniseii 
as  only  one  of  a  large  number  of  technology  items  and  techniques  which  would  be  needed  for  future  tasks  such  as 
spacecraft  assembly,  the  maintenance,  repair  and  refurbishment  of  satellites  in  orbit  and  so  on  but  it  was  unessential 
element  in  the  final  rendezvous  phase.  The  paper  looked  first  at  the  general  requirements  in  relation  to  different  vlocking 
strategies  and  then  considered  in  some  detail  the  docking  mechanism  itself  and  the  associated  electronic  system.  I  he 
hope  was  for  a  first  demonstration  of  docking  during  the  l:S.\’s  l  ureca  1  mission  at  the  end  of  this  decade. 

6.5  In  the  discussion  that  followed  the  three  papers  a  number  of  points  were  brought  out  . 

(a)  the  control  laws  studied  were  simple,  not  necessarily  the  best  but  were 
realistic. 

(b)  minimising  propellant  consumption  during  the  final  phase  was  probably  not 
important  since  it  only  represented  a  small  fraction  of  the  total  needed  for  the 
whole  rendezvous  mission. 

(c)  the  simulation  work  done  was  at  an  early  stage  in  liiirope  and  there  could  be  a 
harder  look  at  the  computation  process  before  a  proper  design  was  implemented, 

(d)  there  might  be  a  need  to  include,  in  the  relative  motion  equations,  some  allowance 
for  differential  orbit  changes  between  chaser  and  target  ( the  two  theoretical  papers 
appeared  to  differ  on  this  score)  for  example  drag  effects  in  Tureca  with  its 
large  solar  array  could  be  important. 

(e)  an  estimate  of  the  computational  load  during  final  docking  ought  to  be  made. 

(f)  a  cruder  docking  mechanism  capable  of  standing  up  to  higher  closing  velocities 
might  be  a  preferable  solution. 

The  discussion  illustrated  very  well  the  current  strong  European  interest  in  the  topic  but  equally  that  studies  were  at  an 
early  stage  and  many  trade-offs  still  had  to  be  performed.  It  was  perhaps  a  little  surprising  to  find  no  US  input  on  this 
subject  -  possibly  their  work  has  already  been  well  publicised. 

6.5  The  next  paper  (Paper  15)  by  Mainguy,  Aumasson  and  LalTy  looked  at  the  problem  of  optimising  the  manoeuvres 
of  a  surveillance  satellite  aimed  at  achieving  a  quick  repeat  over-llight  of  a  particular  point  on  the  Earth.  I'hree  methods 
of  analysis  of  increasing  complexity  were  presented,  with  different  assumptions  about  thrust  level  and  direction  and 
about  the  possibility  of  linearising  the  equations  of  motion  about  the  initial  orbit. 

6.6  In  a  later  question  period,  the  assumption  made  in  the  paper,  that  the  final  orbit  was  in  the  same  plane  as  the  initial, 
was  discussed.  Usually  a  surveillance  satellite  would  be  in  a  synchronous  orbit.  If  the  height  of  the  orbit  had  to  be 
changed  then  to  retain  sun  synchronisation  an  inclination  charge  would  be  needed.  This  had  not  been  studied  but  it  was 
thought  that  the  third  technique  discussed  could  include  this  feature.  The  paper  itself  gave  a  good  introduction  to  the 
topic. 

6.7  It  was  a  little  surprising  that  the  paper  was  classified  NATO  (  onfidcntial  since  there  appeared  to  be  little  ol  a  miliiarv’ 
sensitive  nature  exposed. 

6.8  The  session  finished  with  a  neat  short  paper  (Paper  1 6)  by  Howies  on  a  method  of  performing  attitude  control 
manoeuvres  for  a  spinning  satellite  in  such  a  way  as  to  help  maintain  the  orbit  inclination.  A  spin  stabilised  satellite  is 
normally  controlled  in  attitude  by  firing  axial  thrusters  ( parallel  to  the  spin  axis).  The  orbit  plane  for  a  geostationary 
satellite  is  also  maintained  close  to  zero  inclination  by  thrusting  axially  as  the  satellite  passes  through  the  orbit's  descend¬ 
ing  node.  Thus  if  attitude  control  can  be  exercised  close  to  the  descending  node,  the  thruster  impulses  will  at  the  same 
time  contribute  to  the  correction  of  the  orbit  inclination.  The  paper  described  the  procedure  clearly  and  one  numerical 
example  given  indicated  that,  with  this  method,  out  of  14.2  kg  of  propellant  required  by  Intelsat  \'l  for  attitiule 
manoeuvres  over  a  ten-year  life.  1  3.0  kg  would  contribute  to  inclination  control  a  useful  bonus  at  no  great  difficulty. 

6.9  A  short  discussion  before  the  start  of  the  next  session  clarified  one  or  two  matters  ot  fact. 


7.  FIFTH  TECHNICAL  SESSION 


7. 1  This  session  was  ehaired  by  Dr  TT  imningham  ot  I loiieywell.  USA.  and  under  the  title  oi  l  arge  Spaee  Siiik  lines 
eomprised  five  papers  ofa  highly  theoretieal  nature.  The  paper  by  Sehul/  (Paper  l‘D  was  not  given  due  to  the  .luilioi  s 
illness  but  the  gap  was  filled  by  Dr  Cunningham  himself. 

7.2  The  first  paper  (Paper  1  7)  by  Wall  and  Doyle  dealt  with  the  eharaeteristies  of  uneertainty  for  large  spaee  siriKliiie 
control  problems.  .A  preprint  of  the  paper  was  not  available  during  the  symposium  due  to  its  not  having  been  cleared 
for  publication.  The  authors  discussed  work  carried  out  for  US.AI  OSR  where  the  objeetives  were,  for  a  large  space 
structure,  to  examine  different  ways  of  describing  the  uncertainty  (in,  for  example,  sensor  and  actuator  characteristics 
and  in  structural  properties),  to  compare  methods  of  analysis  and  to  propose  a  formulation  for  the  required  feedback 
control  system,  which  would  function  adequately  in  this  situation.  The  method  of  modelling  the  various  uncertainties 
was  described,  analysis  methods  compared  and  the  structured  singular  value  introduced  as  a  method  of  analysing 
performance  in  the  presence  of  uncertainty. 

7.3  The  second  paper  (Paper  18)  by  Thieme  entitled  Attitude  Control  of  Large  Flexible  Spacecraft  described  some 
initial  results  ofa  study  carried  out  for  ESA.  Three  models  were  used  a  free  beam,  a  flat  plate  with  a  rigid  centre 
body  and  three  coupled  plates.  None,  of  course,  represented  a  real  or  planned  satellite  but  they  possessed  the  character¬ 
istics  which  were  important  in  the  design  of  attitude  control  systems.  The  work  had  reached  the  stage  of  having  com¬ 
pleted  the  analysis  of  requirements,  the  setting  up  of  the  dynamic  models  and  their  analysis,  and  the  design  of  the 
controller.  Later  work  would  aim  at  evaluating  performance  and  the  derivation  of  an  experiment  and  test  programme. 

7.4  To  fill  the  gap  left  by  Paper  19,  Dr  Cunningham  gave  a  presentation  on  some  work  on  the  precision  pointing  of 
flexible  space  structures,  the  main  problem  being  to  achieve  a  specific  mission  performance  in  the  face  of  unknown 
(or  imperfectly  known)  spacecraft  characteristics  and  of  uncertain  disturbances.  Four  classes  of  control  problems  were 
discussed  conventional  attitude  control  taking  account  of  flexibility  with  bending  modes  in  the  control  passband. 
secondly,  conventional  with  vibration  isolation,  thirdly,  attitude  control  with  isolation  and  vibration  control  and 
finally  integrated  pointing  and  vibration  control.  As  a  broad  overview,  the  presentation  gave  a  clear  account  of  the 
problems  and  of  potential  solution  methods. 

7.5  Danesi  followed  with  Paper  20  in  which  he  described  a  decentralised  active  control  system  for  a  large  flexible 
structure  in  space.  The  particular  configuration  studied  consisted  of  a  symmetrical  structure  with  a  central  hub  and 
arms  carrying  solar  panels  and  large  communications  antennas.  In  the  work  done  so  far  only  the  arms  were  assumed  to 
be  flexible.  The  paper  described  the  structural  model  used,  the  method  of  analysis  and  the  control  system  devised. 

Some  simulation  results  showed  the  feasibility  of  the  approach. 

7.6  Finally,  Paper  21  by  Banda  et  al.  discussed  the  design  and  robustness  analysis  of  reduced  order  controllers  for  large 
flexible  space  vehicles.  The  speaker  went  ovei  three  topics  the  background  to  reduced  order  control  and  the  use  of 
linear-quadratic-Gaussian  methods  in  control  design,  stability  robustness  analysis  where  the  use  of  singular  value  theory 
was  noted,  and  performance  analysis.  It  was  pointed  out  that  the  several  stability  robustness  tests  did  not  imply  each 
other  and  that  while  the  passing  of  a  test  did  not  guarantee  control  stability  for  a  given  design,  failure  did  not  necessarily 
imply  the  opposite.  Some  simple  examples,  not  representative  of  real  physical  systems,  were  discussed  and  analysed. 

7.7  There  was  very  little  discussion  of  these  papers,  only  one  Paper  18  attracting  a  couple  of  questions  from  the 
Chairman.  Such  papers,  however,  with  a  high  mathetnatical  content  are  difficult  to  present  and  difficult  for  an  audience 
to  assimilate,  especially  without  a  preview  of  the  paper.  A  proper  study  of  the  papers  when  available  could  well  help  in 
understanding  the  applicability  of  the  theory  to  real  practical  problems. 

8.  SIXTH  TECHNICAL  SESSION 

8.1  Thus  session,  chaired  by  P.Kant,  Netherlands,  turned  from  high  theory  to  the  very  practical  area  of  test  and  per¬ 
formance  evaluation.  There  were  four  papers,  a  preprint  of  the  last  one  not  being  available. 

8.2  The  first  paper  (Paper  22)  by  Shapiro  discussed  the  design,  simulation  and  development  testing  of  the  space  shuttle 
data  bus  system.  The  paper  was  very  clearly  presented  and  the  paper  itself  gives  a  good  account  of  the  various  stages  of 
development  the  system  design  taking  account  of  the  vehicle  needs,  the  detailed  design  of  the  system  modules,  each 
of  which  was  described  in  turn,  and  the  analysis  and  sinitdation  of  the  complete  unit.  Future  trends  in  such  design 
were  seen  to  be  towards  a  mixtttre  of  wire  and  optical  fibres  to  deal  with  the  high  data  rates  ( 10  20  Mbits  per  sec), 
essential  in  future  aircraft,  spacecraft  and  space  stations.  Much  study  of  the  futttre  was  under  way  by  such  bodies  as 
the  SAE  AF.-9B  High  Speed  Data  Bus  Subcommittee  and  an  examination  was  being  made  of  various  architecture,  topo¬ 
logy  and  protocol  candidates.  The  paper  itself  lays  down  a  good  basis  for  the  design,  analysis  and  test  of  future  systems. 

8.3  Questioned  on  the  criteria  for  going  to  fibre  optics,  the  speaker  noted  that  so  far  such  technology  was  not  at  an 
operational  stage  there  was  a  lack  of  suitable  components  and  niuch  need  for  standaidisation.  1  he  technology  would 
be  used,  however,  in  the  fttture  for  many  high  speed  functions,  such  as  on-board  radar  data  processing. 
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w  .iro  I  Ik-  pul  |''osM  111  \  .ilki.il  k'M  .nkl  i urn k  Jl I' >11.  . >l  v > mi m-.  I'  Io  I'u  ^uiu  I Ii.iI  ilk-  -.ol  I k  ,i r u  o  ,ip.i I -lu  i  >1  .k  v " iiipl kinnu 
ur  ,-i\  il  k’ll  1 1  UK  I  k'M  k  ilh  Ilk'  K-i|  uiK'il  pK'^Kk'n  luklur  Ilk'  piu'i.  ril'Uil  I'pur.ilion.il  .."lulil  u'li--  I  Ik-  p.ii  lii  ul.ii  Mr.iMipk- 
.  >1  Ilk-  111.11  II  M>I  Ik  ,uu  durolopud  U'l  I  ho  VUi.kiU  I' mu  \s  as  4i'-v  u-.k'i1  ss  ilh  luluruiKU  l.>  llu'  mk  ^us>t  ul  |>iikciI  iii.---  iK'\ulopuJ 
.llkl  IlllllK'  IK'IKK  .IMvI  Ik'uJ-.  kUIU  UX.inillk'd 

S,>  In  iIk.ikmi'm  il  k.i\  M.-iluJ  llial  iiii'.sioii  Jul.ilii'ii  kas  iiiipm laii I  in  Juk'innnini:  tiu'  luu'l  •>!  |l.'^l  ii'.|iiiK'il  .iiul  .iKo 
I  tl  a  I  Ilk'  1 1  'll,'  I  >1  .1  hi.iili  lurul  laii.miaiii.'  ilul  nm  uliiiiinalu  lliu  lU'uJ  lur  ^uililkalk'ii 

•S  fi  I’, I I'ur  4  l'\  I  liii lak  on  \ uiil  lual lun  .itk!  r .ilklal k'li  appik'j  lo  Ilk'  I  S  M  I  IuK'iim'  Muluun >1, i^u  al  S.ilu I! lU'  I’imi;i .i nt 
lUMSI’i  on-l'oaril  k'ltwaro.  Ilk'u.i!li  piusunluil  uiii  i-il  orJor  aikl  la->l.  u  Ivsl  iIim-'iissuiI  nok  ^^KL'  il  lulalus  uK>\l'I>  Io  ilk- 
pi'i'Mi  UK  pa  pur  Ilk'  ^puakur  hu.nan  k  ii  li  a  iisuril  Jum.i  ipl  mil  >>l  I  liu  DM  S|’  sv  iiuin  aiul  u  1  I  liu  'aluHi  lu  il  'U  II .  i  ouu  I  liur 
kilh  a  briul  liKlurr  ul  lliu  >pauuuratl  vo  tar  plauuvl  u\  uvl'it.  I'utuvu  ii'iUi;  un  in  ihu  luuhnklllu^  ikuP  li'i  '.unikaimn  ,iiul 
ralkl.ilmn  lliu  ;ir--l  hu  Jutinuil  a'UnsuritiL'  llial  Ilk'  uuinpiilur  piuuramiiiu  liaJ  I'uun  Juu'lupuil  in  auuniJ.iiku  uilli  lliu 
Mitikaru  ^pu^ltkaImn  aikl  lliu  ^uu'>lkl  as  tIuluriMiniiii;  llial  lliu  sullkaru  kuiiUI  purlniin  lliu  iiuuusn.iia  luiKlmiis  in  ihu 
opuralional  uiuininMiunl.  (  urruni  luriliualu'ii  pri'uurliirus  kuru  iIkuiksuiI  as  wull  as  ralklaimn  inullmils  iisinj;  lliu  ntiilli- 
prouussur  sottkaru  lusl  tauilili.  I  hu  uapahilily  lo  iiUHlity  ur  luuoiil'ifrnru  lliu  iiii-l'.iaul  sullkaru  k-  u"pu  kiih  spasuurall 
subsysU'iii  taihiru  or  niaUunuImn  kas  nolud  aiul  ruluruiiuu  k.is  mailu  lo  a  iiiinil'ur  ol  susus  kliuru  \  aiul  \  had  ruiualud 
s'lt'Ikaru  laulls  whiuh  uoiild  havu  lukl  uaijstrophiu  rusiilts  in  orhit.  llu  kas  soiitiduiil  lhal  al  luasi  in  Ihu  l)\ISI’  uonlusi 
vurit'iualioii  and  lalidalion  ot  sotikaru  had  iiioru  than  paid  its  way. 

S.7  In  a  hriut  iinustjon  puriod  ihu  usu  ol  Ihu  sollwaru  siimilation  iiuulul  was  duscnhud  as  laluahlu  when  doiihl''  aiosu 
ahonl  the  behaviour  ot  the  iii-orbit  salellitu.  (  luarly.  the  whole  biisinuss  ol  soliwaru  lusl  aiul  vunliualion  will  huuoniu 
more  ami  more  important  in  the  I'uluru  as  more  use  is  maile  r’l  miurouompulurs  lor  on-hoaril  tasks.  (  onlkluiiuu  m  Ihu 
hardware  is  perhaps  more  easily  auhiuied  than  m  the  software  and  the  two  papers  were  very  usuliil  in  undurlmiiii;  the 
existence  of  the  problem  and  m  dusunbiiii;  the  teuhni()iies  and  muthoils  which  hate  already  been  suuuusslully  appliuil, 

8.S  The  final  paper  on  the  programme  (Paper  2.'')  was  presented  by  van  Holt/,  aiul  dealt  wiih  the  mission  coiiirol  system 
of  the  infra-red  astronomy  satellite  ( IR.-\Si.  I  lie  speaker  gave  an  outline  of  the  satellite  and  its  payload  and  ot  ilie 
ground  operations  required.  -\  particular  feature  of  the  satellite  was  the  ability  to  reprogram  the  on-board  ei'tniniter 
from  the  ground  and  this  facility  had  been  used  at  least  once  per  month  from  launch.  Il  liad  been  possible  by  this 
means  to  overeome  the  problems  caused  by  the  anamalous  behaviour  of  one  of  the  on-,  .'ard  sensors  early  in  the  life  of 
the  satellite  and  as  another  example,  the  sensitivity  of  the  infra-red  telescope  to  l  artli  radiation  had  been  controlled  by- 
means  of  on-board  programming.  Other  capabilities  recovery  from  danger  situations  and  the  iii-nighi  lest  of  new 
control  methods  (described  in  Paper  I  1  )  were  meittioned.  It  was  noted  in  the  question  period  that  the  new  control 
technique  once  tested  could  readily  be  substituted  for  the  old.  -S  further  example  of  fho  usefulness  of  the  facility 
related  to  the  previous  Dutch  astronomy  satellite.  A  NS.  where,  the  satellite  having  arrived  in  the  wrong  orbit,  all  the 
on-board  software  had  had  to  be  changed.  The  need,  of  course,  to  lest  the  software  by  ground  simulation  before  on¬ 
board  use  was  stressed. 

8.9  This  was  a  useful  and  interesting  session  dealing  with  real  solutions  to  practical  problems  in  an  area  of  space  system 
design  which  will  undoubtedly  become  more  important  in  the  future.  L'seful  pointers  to  future  work  were  provided  by 
the  various  speakers. 

9.  ROUNDTABLE  DISCU.SSION 

9.1  A  short  discussion  period  followed  the  final  technical  vevsion,  the  platform  party  comprising  Miss  I  veline  (lolt/em. 
Mr  J.B.Dahlgren  and  Dr  T. Cunningham,  w  ith  Mr  P.  van  den  Broek  as  <  hairman. 

9.2  Each  of  the  panel  members  made  an  opening  sialemeni  and  discussion  centred  around  the  points  they  m.ide.  1  here 

was  the  view  that  once  again  the  gap  between  theory  and  its  practical  application  had  w  idened  this  particularly 
exemplified  by  the  papers  of  the  fifth  technical  session.  Il  was  felt  that  earlier  advances  in  control  theory  had  been 
helpful,  not  so  much  in  aiding  system  design  as  m  assisting  the  formulation  of  the  problem.  I  here  w.is  evulently  no 
universal  recipe  for  solving  control  problems,  no  aiiloinated  control  system  synthesiser,  but  if  theory  could  help  m 
establishing  a  proper  statement  of  the  problem  (for  ex.imple  by  devising  malhematical  ways  ol  deseribing  sy  stem 
uncertainties),  then  this  was  at  least  a  step  forward.  I  he  method  of  solution  then  did  not  m.itter  gre.itly ,  though  the 
point  could  be  made  that  in  formulating  the  problem  (e.g.  the  perform.ince  criten.i)  the  mellnul  ol  solution  w.is  dki.iled 
There  was  almost  bouiul  to  be  a  gap  between  theory  and  practice,  with  the  practitioner  t, iking  tune  see  the  relec.iiKC 

the  transfer  of  the  state  space  methods  of  the  early  ('t)s  h.id  been  slow  but  the  lechniq  ues  h.ul  been  louiul  lo  be  usel  ul 
and  there  was  no  reason  to  suppose  th.it  this  would  happen  ag.nii  with  the  applicable  elements  ol  the  new  theory 

9..?  The  importance  of  the  subiect  ol  mieracliotts  between  strikime  .iiul  control  systems  had  been  undeilmed  by  the 
number  of  pafiers  on  the  topic  presented  .it  the  sympi  siiim.  I  here  w.is  need  lor  lurihei  dec elopmen l  oi  modelling  .iiul 
model  reduction  techniques  and  for  cost  effeetne  ground  .nul  Ihghi  lest  melliods  ( il  course,  .ic  lue  disturb, mcC  connol 
need  not  always  be  requireil  .ind  lor  example  there  would  alw.iys  be  a  possible  Ir.ide  oil  between  siiltenmg  the  sirucliire 
and  complicating  the  control  system. 


10.  COMMENT  ON  SYMPOSIUM  ARRANGEMENTS 


10.1  The  list  of  attendees  issued  at  the  symposium  indicated  that  around  1  .ft)  people  had  registered.  Hie  audlenee 
at  the  early  sessions  probably  averaged  about  75  with  a  tendency  to  a  smaller  number  towards  ilie  end. 

10.2  Twenty-four  papers,  in  addition  to  the  Keynote  .Address,  were  presented  in  si,\  technical  sessions  and  the  m.ijority 
of  them  were  of  a  good  standard.  It  was  unfortunate  that  preprints  of  the  papers  were  available  at  best  just  before 
presentations  were  made  and  an  earlier  availability  certainly  in  the  case  of  the  more  abstruse  papers,  might  have  led  to 
livelier  discussion  periods  which  were  generally  short. 

10.3  That  the  discussions  were  short  was  in  a  number  of  cases  due  to  presenters  over-running  their  allotted  time  a 
point  made  by  the  Symposium  Chairman  in  his  closing  comments.  .A  better  discipline  on  the  part  of  some  of  the  speakers 
(and  perhaps  a  harder  line  by  the  Session  Chairmen)  was  clearly  needed. 

10.4  Presentations  were,  on  the  whole,  good.  In  some  cases,  the  visual  aids  used  (e.g.  typewritten  viewgraphs)  were 
not  very  visible  and  some  speakers  without  good  English  were  difficult  to  follow.  There  was  perhaps  also  a  tendency  to 
try  to  cram  too  much  into  the  allotted  speaking  time  earlier  availability  of  papers  could  help  in  this  and  perhaps  enable 
speakers  to  select  the  major  points  of  their  papers  for  presentation.  In  a  few  cases,  for  example,  the  speaker  merely 
read  his  printed  paper.  The  translators  seemed  on  occasion  to  have  had  little  time  beforehand  to  become  familiar  with 
the  papers  interpretation  thus  suffered  and  authors  should  provide  material  to  the  interpreters  well  ahead  of  their 
presentations. 

10.5  As  to  the  local  organisation  of  the  meeting,  everything  went  very  smoothly  and  efficiently.  The  AGARD  staff 
and  those  of  the  Air  War  College  involved  are  to  be  congratulated.  One  of  the  main  advantages  of  meetings  of  this  sort 
is  the  opportunity  they  give  of  meeting  other  experts  in  the  field  and  often  the  best  results  are  obtained  outside  the 
meeting  room.  During  the  day  there  were  adequate  opportunities  to  bring  this  about;  the  scattering  of  delegates  over 
many  hotels,  inevitable  in  a  city  like  Florence,  still  in  the  tourist  season,  perhaps  restricted  evening  discussions  and 
social  meetings. 

10.6  It  is  difficult  to  assess  audience  reaction  to  the  symposium.  Only  three  questionnaires  were  returned  and  even  if 
these  were  generally  favourable  the  sample  is  hardly  a  fair  one.  The  comments  made  are.  however,  incorporated  here 
and  in  the  next  section  of  this  report. 

10.7  As  has  been  noted  in  previous  sections,  two  of  the  papers  were  classified  NATO  Confidential  for  no  very 
apparent  reason.  This  had  the  effect  of  unnecessarily  complicating  the  local  arrangements  and  care  must  be  taken  at 
future  meetings  not  to  over-classify  material. 

10.8  It  was  surprising  to  find  no  ES.A  representation  at  the  symposium.  Perhaps  the  military  label  was  to  blame  but 

it  appeared  that  NASA  had  no  qualms  about  attending.  It  was  perhaps  also  surprising  that  the  USAF  Space  Division  was 
not  present. 


1 1 .  CONCLUDING  COMMENTS  ON  TECHNICAL  CONTENT 

1 1 . 1  Technical  Balance 

11.1.1  The  Programme  Committee  put  together  a  reasonably  good  set  of  papers  bearing  in  mind  their  dependence 
to  a  large  extent  on  what  is  offered  to  them.  The  balance  was  good,  covering  most  of  the  areas  of  current  concern  in 
control  system  design.  There  was  a  nice  mixture  of  down  to  earth  papers  (if  such  a  phrase  can  be  used  in  relation  to  a 
space  symposium)  and  of  high-flown  theory  which  will  need  time  to  digest.  Perhaps  more  would  have  been  desirable 
on  the  characteristics  of  the  sensors  and  actuators  needed  in  future  programmes  the  session  on  control  components 
did  little  more  than  discu.ss  such  as  were  currently  available  and  well  known. 

1 1.1. 1  In  a  few  cases,  the  authors  contented  themselves  with  reporting  the  results  of  work  done  and  a  look  into  the 
future  would  have  been  desirable,  with  an  identification  of  new  issues  that  had  emerged  and  of  further  research  require¬ 
ments.  In  other  cases,  work  was  clearly  at  an  early  stage  but  it  was  useful  to  hear  progress  reports.  I  hese  commc^I^ 

I  do  not,  of  course,  uniformly  apply  and  there  were  adequate  looks  at  the  future  NASA's  views  on  needs  were  valuable 

for  example.  The  highly  theoretical  papers  of  Session  V  certainly  raised  some  controversy  and  it  will  he  interesting  to 
;  observe  how  the  gap  between  the  theoreticians  and  the  practical  control  engineers  varies  with  time.  I  he  comment  m.ide 

I  during  the  Round  Table  Discussion  that,  at  the  first  lEAC  meeting  in  l‘)5(i,  an  objective  that  emerged  was  to  close  the 

I  gap  between  theory  and  practice  seems  again  relevant. 

I 

i  11.2  Technical  ls.sues 

) 

I  1 1.1. 1  It  was  apparent  that  a  major  area  of  immediate  concern  in  control  system  design  was  how  to  ileal  w  ith  the 

I  interaction  between  the  spacecraft  structure  and  the  control  system  itself  and  the  need  to  establish  a  sound  basis  ol 

I  theory  was  underlined.  The  large  spacecraft  of  the  future  with  their  many  tlexible  appendages,  spaee  stations  .issembled 

I 


ill  orbit  eleniL’iit  by  elcineiit  with  tonso(|ucnl  clianiti's  in  ilynaiiiio  IK-Iiavinur  aiul  llii’  nKri.’a--int!  aL\uiai.>  ilL'iiiaiub-J 
of  attitiidi’  Lonlrol  all  present  problems  of  yreat  eomple\ity  to  the  eoiilrol  system  ilesiener.  S\  stein  inoilellini:  aiul 
sinuilation  will  be  neeessary  but  it  w  as  also  to  be  noted  that  nuieh  emphasis  w  as  plaeed  on  the  need  bu  I  light  tests  ,it 
real  systems.  The  various  i.ssues  were  well  brought  out. 

1 1.2.2  It  was  interesting  to  note  the  etirrent  liuropean  eoneern  with  the  problems  of  reiitle/vous  anti  tloektng  in  oihit. 
an  area  where  the  U.S.X  has  already  reaehed  a  high  level  of  eompetenee.  I  tiropean  work  on  this  lopie  is  ele.iiK  .11  .1  tei\ 
early  stage.  .\  start  has  been  made,  however,  and  it  is  elear  that  this  will  remain  a  strong  reseat eli  .iie.i  lot  some  time 

1 1.2.3  The  importanee  of  software  also  emerged.  The  mieroeomputer  presents  main  oppoitunilies  iti  the  eonitol 
system  designer  but  it  brings  its  own  problems  too.  There  is  the  reliability  of  the  eomptiter  itsell  but  perhaps  nitne 
important  is  the  ‘reliability’  of  the  software  the  need,  for  example,  to  be  sure  that  the  programs  w  ill  pertorm  .ill  the 
neeessary  funetions  in  the  preseribed  environment  and  that  all  eventualities,  ineluding  failure  situations,  hate  been  e.ileied 
for.  There  is  the  need,  too.  to  be  able  to  modify  on-board  software  from  the  ground  as  the  dynamie  environment  elt.inges. 
.\11  this  underlines  the  need  forade<iuate  spaeecraft  models;  quality  control  is  every  bit  as  important  with  sollw  .ue  as 
with  hardware.  In-tlight  testing  of  software  is  also  available  and  may  indeed  be  desirable,  just  as  m  the  ease  of  some 
hardware  there  was  an  interesting  presentation  on  this  topic  from  which  there  emerged  that  a  spacecraft  mathematical 
model  is  not  always  a  proper  substitute  for  the  real  thing. 

12.  MILIT.XRY  IMPLIC.MIONS 

12.1  As  was  noted  earlier,  there  was  little  or  nothing  of  a  specifically  military  nature  discussed  at  the  symposium 
perhaps,  as  was  said,  not  surprising  since  as  far  as  guidance  and  control  is  concerned,  civil  and  military  systems  have 
requirements  in  common  and  also  in  view  of  the  fact  that  liuropean  N.ATO  members  have  had  little  involvement  with 
space  systems  for  military  purposes.  Some  greater  input  from  the  US,\  in  this  area  might  have  been  expected.  The 
papers  presented,  of  course,  have  relevance  to  military  systems  but  it  would  have  been  desirable  to  have  heard  something 
from  the  military  customers  in  each  NATO  country,  of  their  views  on  military  space  systems  and  of  the  requirements 
they  foresaw.  This  could  be  a  useful  element  in  any  future  meeting  held  by  AOARI)  on  space. 

13,  RECOMMENDATIONS 

13.1  In  any  future  AGARD  meetings  on  space-related  subjects  it  would  be  desirable,  as  hasjiist  been  said,  to  hear  the 
views  of  the  military  planners,  within  NATO  organisations  and  those  of  the  participating  nations,  on  future  requirements 
for  space  systems  for  military  purposes.  It  might  well  be  said  that  none  of  the  papers  given  in  Florence  would  have  been 
out  of  place  at  any  unclassified  symposium  and  an  injection  of  military  thinking  could  help  in  future  events  of  this  sort. 

13.2  It  would  be  wrong  to  make  any  specific  proposals  as  to  areas  where  research  is  necessary  and  indeed  difficult  to 
visualise  how  AGARD  could  bring  intluence  to  bear.  As  evidenced  by  the  symposium,  the  major  problem  areas  in 
control  system  design  are  generally  well  recognised  and  are  being  investigated.  In  Ftirope,  of  course,  most  of  the  effort 
is  being  supported  by  civil  funds  and  conceivably  AG.ARD  could  inlTuence  the  military  planners  of  the  member  states 
(the  US  apart)  to  think  harder  about  their  needs  for  space  systems.  Or  is  this  an  area  to  be  left  entirely  to  the  LISA? 

13.3  In  paragraph  10  a  number  of  comments  were  made  on  the  symposium  arrangements  and  perhaps  it  suffices  to 
underline  a  few  of  them: 

(ai  it  would  be  better  if  papers  were  available  for  study  before  the  meeting; 
this  could  help  in  streamlining  presentations  and  in  allowing  longer  time 
for  discussion; 

I  b)  there  is  a  need  for  greater  discipline  on  the  part  of  speakers  to  stick  to 
their  allotted  time  and  to  use  visual  aids  that  are  visible: 

(c)  over-classification  of  papers  should  be  avoided  or  alternatively,  if  the 
meeting  is  to  be  classified,  then  classified  material  should  be  presented. 
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INTRODUCTION 


When  I  was  asked  to  stand  in  for  Del  Williams  as  your  key.note  speaker,  I  was 
honored  to  be  asked  to  participate  in  what  I  consider  a  timely  and  significant  symposium 
directed  to  issues  of  major  concern  for  future  space  programs.  I  am  convinced  that  the 
progress  in  space-technology  which  we  have  experienced  in  the  past  years  is  due  in  no 
small  part  to  gatherings  such  as  this.  The  evidence  of  this  progress  is  apparent  in  the 
current  generation  of  satellites  and  spacecraft,  and  the  technical  community  which  you 
all  represent  can  justifiably  take  pride  in  the  accomplishments  to  date. 

As  impressive  as  these  accomplishments  are,  however,  future  space  initiatives 
pose  even  more  significant  challenges  which  will  require  well  planned,  innovative 
technology  development  programs.  In  a  number  of  areas  major  advances  are  needed  if  we 
are  to  attain  our  goals  in  space,  and  progress  in  these  areas  is  pivotal  to  ensuring 
engineering  readiness  for  the  next  generation  of  spacecraft.  I'm  sure  it's  no  surprise 
to  this  audience  that  one  of  these  critical  areas  is  spacecraft  guidance  and  control. 

Since  my  primary  responsibility  to  the  Space  Systems  Division  of  the  Lockheed 
Missiles  and  Space  Company  is  the  planning  and  overseeing  of  our  technology  development 
programs,  I  am  particularly  interested  in  the  advances  in  controls  technology  that  will 
be  presented  and  discussed  in  your  symposium  proceedings.  In  turn,  I  would  like  to  share 
with  you  some  thoughts  and  observations  regarding  the  role  that  your  technology  can  play 
in  enabling  future  space  missions  that  are  presently  in  the  preliminary  and  advanced 
planning  stages.  These  observations  are  derived  both  from  my  involvement  with  the 
technology  planning  activities  at  Lockheed  and  from  my  experiences  as  a  member  of  NA.'^A 
and  U.S.  Air  Force  technical  committees. 

At  the  outset,  I  would  like  to  point  out  that  I  am  not  an  expert  in  guidance  and 
controls  technology,  and  my  remarks  will  not  address  the  exciting  new  technology 
developments  that  will  be  ably  presented  by  the  speakers  that  will  follow  me.  Instead, 
ray  comments  will  be  from  the  point  of  view  of  one  who  is  concerned  with  the  broad  range 
of  issues  relating  to  technology  readiness  for  future  space  programs,  many  of  which  have 
vital  military  significance  for  the  free  world.  From  this  perspective,  I  will  discuss 
the  role  advanced  guidance  and  control  technology  can  be  expected  to  play  in  enabling 
future  space  missions  and  the  perceived  difficulties  involved  in  meeting  the  challenges. 
It  is  my  hope  that  these  remarks  will  help  underscore  the  significance  and  timeliness  of 
this  symposium  and  the  importance  of  your  work  in  preparing  the  way  for  the  next 
generation  of  space  vehicles. 

OverView 

Although  the  space  age  is  barely  -two  and  a  half  decades  old,  we  have  seen  the 
growth  from  tiny,  rigid  bodies  capable  of  transmitting'  meaningless  electronic  signals  to 
complex,  multi-bodied  vehicles  capable  of  performing  a  vast  array  of  important  science, 
military,  and  commercial  applications  missions.  The  evolution  of  guidance  and  control 
technology  to  support  these  missions  has  been  correspondingly  dramatic,  and  this 
evolution  has  been  the  subject  of  a  number  of  technical  papers  in  recent  years.  As 
impressive  as  these  accomplishments  have  been,  it  is  important  to  recognize  that  the 
progress  has  been  primarily  in  the  area  of  applications  rather  than  theory.  In  fact, 
several  noted  authors  have  taken  the  position  that  spacecraft  guidance  and  control  is  so 
well  established  that  it  no  longer  constitutes  a  field  for  research,  with  the  strong 
implication  that  future  space  programs  can  consider  this  area  as  a  '’flight-ready’' 
technology  rather  than  one  requiring  major  attention  for  future  developmen t . 

Is  this,  in  fact,  the  case?  Can  those  who  have  the  responsibility  for  planning 
future  space  missions  consider  guidance  and  control  issues  to  be  routinely  handled  by 
normal  technological  developments,  or  will  they,  instead,  be  seriously  constrained  in 
their  options  for  future  spacecraft  configurations  if  they  rely  on  extensions  of  our 
present  practices?  These  questions,  which  are  fundamental  to  the  theme  of  this 
symposium,  are  of  the  greatest  significance  to  the  space  mission  planners,  and  they  liave 
been  receiving  major  attention  at  the  highest  levels  of  U.S.  space  program  management. 
NASA  recently  formed  a  special  committee  to  report  on  these  Issues,  and  the  subject 
continues  to  have  high-priority  NASA  attention.  I  believe  you  will  hear  something  wf 
this  in  the  following  presentations.  The  U.S.  Air  Force  has  an  on-going  effort  to  define 
needed  technology  advancements,  and  the  Military  Space  Systems  Technology  Moriel  (M.S3TM), 
which  defines  these  requirements,  has  a  substantial  section  devoted  to  guidance  mi 
control  issues.  Also,  I  believe  I'm  on  safe  ground  in  stating  that  all  major  'i.s, 
aerospace  contractors  are  watching  this  area  with  great  interest  as  part  of  their  in- 
house  technology  development  program  planning.  My  following  remarks  will  he  directed  t' 
summarizing  the  general  findings  of  these  various  planning  groups  relative  to  the  neei.-, 
for  advanced  controls  technology,  and  the  perceived  status  of  the  technology  to  meet 
these  needs. 


Perh.ips  the  most  .isible  example  of  future  spaoeoraft  tre.-,.‘.s  •,tr  1 

teohrology  is  the  Space  Telescope  (ST).  Trie  sice  of  trie  satellite  ini  ine  p--*- 

accuracy  requirements  poseJ  substantial  controls  ciiallenges,  an.i  its  operation  wii;  o*.  , 

■nilestone  in  fine-pointing  control  of  spacecraft.  The  AXA."  (Advanced  X-ray  Astropnysi  a! 
Facility)  program,  which  is  in  an  advanced  planning  stage,  will  benefit  fr' cm  :'T 
experience,  but  will  provide  its  own  challenges  for  controls  teinn  ology  .  Fiitn  jf  tia-n.' 
vehicles  typify  the  trend  to  large  articulated  spacecraft  possessing  flexible  appf,  ;  , 

Also,  for  future  planetary  missions  using  sol ar-e 1 ec t r  i  -  propulsion,  the  ma  i  ir  p.rti  n  i 
the  spa.'ecraft  structure  will  be  solar  arrays,  and  effective  iiatidling  if  trie  iistr-ii  i'--1 
flexibility  of  these  systems  will  be  a  significant  centrals  issue. 

iJith  the  advent  of  the  .Space  Tr  an  spor  ta  t  ion  System  (STS),  it  is  n-w  p  i 1  >-  t 
consider  very  large  spacecraft  assembled  in  space  using  multiple  STS  launches.  Altr.jjgn 
a  practical  solar-power  space  station  is  not  realizable  in  the  near  future,  ^ i 
solar  array  area  is  required  for  a  number  of  future  space  missions  wnich  are  in  present 
planning  stages.  Such  missions  can  be  expected  to  have  f  1  ex  ib  1  e-b  c  i  y  m.des  - 'Se  t  > 
within  the  necessary  controls  bandwiith,  ani  they  will  require  new  cintrols  appr  a'.,,..;. 
Finally,  the  NASA  Space  Station  initiative  is  in  its  formative  stages,  but  is  a  str  cig 
motivation  for  controls  technology  development.  Although  the  final  con  f  i  g  ur  a  1 1  n  is 

still  evolving,  it  seems  clear  tnit  livanced  controls  techniques  will  have  tc 

considered,  and  that  such  techniques  may  significantly  enhance  the  design. 

The  two  most  significant  controls  technology  issues  that  h.ave  emerge  i  from  tne 
technology  needs  assessments  of  these  missions  are  related  to  the  piteriti'i!  n*‘ei  f,r 
controls  strategies  that  actively  suppress  f i ex  i  bl e-bo  1  y  structural  responses  a:-!  for 
autonomous  controls  operation.  The  latter  issue  is  of  extreme  importance  to  a  number  of 
future  space  programs,  especially  in  the  military  sphere,  and  I  will  comment  further  on 
this  a  little  later.  However,  the  issue  causing  greatest  concern  as  regards  new 
technology  development  is  whether  or  not  present  controls  approaches  will  be  able  to 

satisfy  the  extremely  demanding  accuracy  and  agility  requirements  of  future  space 

missions,  some  of  which  also  require  very  large  spacecraft  that  will  be  considerably  more 
flexible  with  respect  to  the  controls  bandwidth  than  has  been  the  case  to  late. 

For  purposes  of  brevity,  I  will  refer  to  controls  approaches  that  include  the 
active  suppression  of  elastic  mode  responses  as  CSI  ( Con trol s-Str uc t ures- In  ter ac t ion ) 
technology  in  this  discussion.  While  this  technology  has  considerable  development 
history,  this  has  been  almost  entirely  in  a  research/university  context.  No  present 
spaoeoraft  system  uses  this  approach,  and  relatively  little  work  has  been  done  to 
transition  CSI  technology  to  engineering  applications.  In  the  U.S.  a  significant  start 
has  been  made  via  a  government  sponsored  technology  initiative  termed  AC0S.3  (Active 
Control  of  Space  Structures),  which  is  funded  by  the  Defense  Advanced  Research  Programs 
Agency  (DARPA),  but  much  work  remains  to  be  done.  As  a  technology  planning  issue,  then, 
it  is  clearly  of  great  importance  to  assess  the  need  for  this  advanced  controls  approach 
for  future  spacecraft  and  to  realistically  identify  the  development  timelines  for 
remedying  any  deficiencies. 

One  of  the  more  intensive  attempts  to  evaluate  the  need  for  CSI  technology  for 
future  U.S.  space  programs  was  the  NASA  committee  activity  I  earlier  mentioned.  This 
considered  both  NASA  and  military  candidate  missions.  Although  determining  the  level  of 
need  for  CSI  approaches  requires  a  reasonably  complete  preliminary  design  process,  which 
was  not  available  for  most  of  these  future  mission,  the  committee  was  able  to  conclude 
that  a  number  of  major  future  NASA  and  military  space  initiatives  would  face  serious 
design  constraints  if  CSI  is  not  available  as  a  controls  option.  The  most  stringent 
controls  requirements  were  related  to  resolution  and  pointing  accuracies  of  primary 
payload  sensors,  some  of  which  require  very  large  apertures. 

A  useful  technique  for  assessing  when  the  combination  of  size  and  accuracy 
requirements  for  these  spacecraft  will  result  in  a  probable  need  for  advanced  controls 
technology  is  to  consider  the  parameter  P/f,  where  "D"  is  the  aperture  diameter  and  "f" 
is  the  lowest  modal  frequency  of  significance  to  the  pointing  and  configuration  control 
of  the  system.  If  this  is  plotted  as  a  function  of  operating  wave-length  for  various 
missions,  those  having  a  D/f  greater  than  approximately  100,000  can  be  considered  in  the 
CSI  technology  category.  This  approach,  developed  by  Dr.  K.  Soosaar  of  Draper 
Laboratories,  is  illustrated  in  Figure  1,  which  identifies  33  missions  presently  in 
serious  planning  stages.  While  this  should  be  viewed  as  only  a  rough  assessment  of  need 
in  any  specific  case,  the  overall  picture  clearly  supports  the  conclusion  that  the  CSI 
option  is  a  major  concern  for  many  future  space  missions. 

The  second  major  area  of  concern  regarding  guidance  and  control  technology  for 
future  space  programs  that  has  emerged  from  these  planning  studies  is  the  need  for 
greatly  enhanced  capabilities  for  autonomous  operation.  The  .ability  of  spacecraft  to 
maintain  on-board  knowledge  of  its  orbit  parameters  and  to  perform  its  navigation  and 
station  keeping  functions  for  long  periods  without  contact  from  g  iind  stations  is  key  t  > 
successful  performance  of  a  number  of  important  missions.  s-'  3  equirement  has  been 

largely  related  to  military  needs  for  survivable  space  defense  issc  >,  but  there  are  also 
major  cost  savings  associated  with  reducing  the  very  sizable  expe,.  es  incurred  by  ground 
operations  related  to  constant  monitoring  of  spacecraft  functions  and  ri  e term  i  n a t i on  of 
orbital  parameters.  The  Jet  Propulsion  Laboratory  of  NASA  has  taken  the  leal  in  defining 
autonomy  capability  levels  for  spacecraft  operations  and  is  presently  working  with  t  iie 


'J .  S .  Air  Forje  tj  rielp  focus  the  nceJel  t.  cc  hno  io;;  y  ieveiopments  in  iiiis  urei,  Irn-y  n  ivv 
Jefine.l  j  grnJusteJ  scale  of  10  autonomy  levels  for  assessing  spacecrift  ne>‘i:-,.  "sing 
this  scale,  an  overall  assessment  of  future  re  5U  i  remen  t  s  for  our  .lefense  satellites  sh)~., 
a  major  neeJ  for  improvements  in  the  controls  area,  especially  in  on-boar  i  .rtiitil 
parameter  determination,  fault  tolerance,  and  orbit  correction  decision  making. 

TECHNOLOGY  ASSESSMENT 

One  of  the  most  lifficult  problems  faced  by  those  responsible  fir  our  space 
programs  is  the  objective  and  accurate  assessment  of  the  engineering  ti'o'b.nil 
necessary  to  field  complex  future  space  systems.  Errors  in  judging  the  ability  .of  oar 
technical  community  to  meet  these  neels  can  obviously  have  the  most  serious  c  on  se  1  ue  n  .'e  .s  . 
Unfortunately,  a  number  of  past  proj<...  ts  have  had  to  be  cancelled,  or  were  completed  wiln 
large  over-runs  and  reduced  performance,  due  to  inaile  juate  technology  assessments  pri  or 
to  tb.eir  initiation.  The  major  issue  is  not  technic.al  feasibility,  although  this,  of 
course,  must  be  established,  but  rather  whether  or  not  the  technology  will  be  "flight- 
ready"  when  it  is  needed.  The  term  "flight-ready"  in  this  context  implies  (H  minimal 
risA  compared  to  other  approaches,  (?)  cost  effectiveness,  (3)  a  reasonable  level  if 
proven  capability  by  aerospace  contractors,  and  (y)  established  procedures  fir  developing 
associated  performance  and  testing  specifications  for  spacecraft  systems. 

As  an  example  of  this  assessment  process,  the  following  questions  must  be 
carefully  considered: 

-  Is  the  theory  well  developed  and  are  the  necessary 
computational  tools  available? 

-  Has  the  technology  been  adequately  tested  on  previous 
spacecraft,  or  by  laboratory  experiments? 

-  Has  the  technology  been  reduced  to  engineering  prac¬ 
tice?  (i.e.  specifications  and  criteria) 

While  obtaining  such  an  assessment  may  appear  to  be  straight-forward  to  those  not 
involved  in  space  technology  management,  in  practice  quite  the  opposite  is  true.  The 
program  office  people  who  are  tasked  with  planning  future  projects  may  tend  to 
underestimate  technical  risks,  either  because  of  a  lack  of  technical  expertise  or  due  to 
their  understandable  enthusiasm  to  "sell"  their  projects.  On  the  other  hand,  the 
technologists  frequently  tend  to  be  over-optimistic  regarding  technical  risks  and  often 
do  not  understand  the  engineering  difficulties  associated  with  converting  their  technical 
contributions  into  flight  hardware  that  can  be  delivered  on-time  and  within  cost. 

With  these  comments  in  mind,  I  would  now  like  to  briefly  discuss  the  assessment 
of  controls-structure  interaction  technology  that  was  earlier  identified  as  a  major 
concern  for  future  space  missions.  A  first  observation  regarding  CSl  technology  is  that 
it  cannot  reasonably  be  viewed  as  a  simple  extension  of  existing  practice.  It's 
application  to  future  spacecraft  will  require  substantial  changes  in  the  way  the  controls 
subsystem  is  handled,  and  a  number  of  technical  issues  must  be  resolved  before  it  can  be 
considered  flight-ready.  Some  deficiencies  are  evident  in  each  of  the  three  assessment 
categories  I  earlier  mentioned.  The  methodology  area  is  closest  to  readinesss,  although 
even  here  some  questions  need  I'esolution.  In  the  experimental  base  and  practice  and 
criteria  areas  much  work  needs  to  be  done.  Five  of  the  most  important  sub-categories  cf 
CSI  technology  that  need  work  are: 

-  Analytic  modelling  accuracy  and  model  reduction 
criteria 

-  System  identification  procedures 

-  Robustness  criteria 

-  Development  of  sensors  and  actuators 

-  Digital  implementation 

Each  of  these  areas  is  of  particular  concern,  and  technology  level. ;pment  activities  are 
needed  if  we  are  to  realize  the  potential  of  this  new  control.s  approach  for  future 
spacecraft . 

Perhaps  me  of  the  most  important  aspects  of  this  new  approach  i  the  need  to 
recognize  that  its  success  will  require  the  cooperative  efforts  of  several  lisciplines  in 
a  much  more  effective  manner  than  has  been  the  case  in  the  past.  The  practical 
convergence  of  'ontrols,  structures,  and  computer  technologies  will  be  nece.ssary  if  of, I 
applications  are  to  become  a  reality  (Figure  ?).  Multi-disciplinary  resoarch  and 
development  programs,  improved  university  curricula,  and  new  appro, ichi's  I  c  i  ■!  U  im  t  r  i  1 1 
technical  management  are  all  important.  This  symposium  and  the  efforts  of  t.iiis  tc'hni'.il 
community  will  be  key  elements  in  this  evolution,  which  will  play  a  moi'r  r  Ge  in 
preparing  the  way  for  the  next  generation  of  space  systems. 
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SUMMARY 

Future  missions  in  space  will  require  controlling  spacecraft  which  are  Loth  large  and 
flexible.  The  limited  inherent  oamping  and  the  uncertain  and  changing  dynamic  character¬ 
istics  of  many  of  these  vehicles,  such  as  manned  space  stations  and  large  antennas,  will 
revolutionize  spacecraft  control  requirements.  In  preparation  for  the  time  that  such  con¬ 
trol  systems  are  required,  considerable  research  and  technology  development  is  necessary. 

A  program  is  in  place  at  NASA  for  the  development  of  active  control  technology  to  support 
major  initiatives  for  space  station  and  advanced  spacecraft.  A  number  of  key  control  tech¬ 
nology  program  needs  are  cited  in  the  paper  as  required  for  these  and  other  future  NASA 
missions  together  with  an  integrated  cdntrols/structures  technology  flight  experiment  to 
demonstrate  and  validate  technology  for  large  flexible  structures. 

t\, 

INTRODUCTION 

The  objectives  of  NASA's  space  technology  long  range  plan  are  shown  in  Figure  1.  As 
indicated  in  the  figure  the  importance  of  space  R&T  must  be  established  and  strengthened 
to  ensure  the  timely  provision  of  new  concepts  and  advanced  technologies  for  the  U.S. 
civil  and  military  space  activities.  New  initiatives  are  being  planned  to  provide  the 
capability  for  in-space  testing  through  space  flight  facilities  and  experiments,  ana  to 
develop  the  technology  to  support  space  station  and  advanced  spaceframes.  Also  a  new 
program  has  begun  to  increase  university  research  and  small  business  innovative  research 
which  address  important  NASA  scientific  or  engineering  problems  and  opportunities,  before 
moving  into  details  of  spacecraft  control  research  at  NASA  which  is  associated  with  the 
theme  of  this  technical  symposium  on  "Guidance  and  Control  Techniques  for  Advanced  Space 
Vehicles"  we  will  first  look  at  the  specific  objective  for  the  NASA  space  controls  and 
guidance  R&T  program  shown  in  Figure  2. 


OBJECTIVES 

•  ESTABLISH  IMPORTANCE  OF  SPACE  RaT  TO  ATTAINMENT  OF 
NATIONAL  SPACE  POLICY  OBJECTIVES 


•  PROVIDE  U  S.  R&T  CAPABILITY  BY  MAINTAINING  NASA 
CENTERS  IN  POSITIONS  OF  UNDISPUTED  EXCELLENCE  IN 
CRITICAL  SPACE  TECHNOLOGIES 

INITIATIVES:  IN-SPACE  FLIGHT  FACILltlES  AND 
_ EXPERIMENTS _ 

•  STRENGTHEN  NASA'S  SPACE  RfrT  PROGRAM  TO  INSURE  THE 
TIMELY  PROVISION  OF  NEW  CONCEPTS  AND  ADVANCED 
TECHNOLOGIES  FOR  THE  U  S.  CIVIL  AND  MILITARY  SPACE 
ACTIVITIES 

INITIATIVES:  SPACE  STATION  TECHNOLOGY 
_ SPACEFRAME  TECHNOLOGY 

•  ASSURE  BALANCED  PARTICIPATION  IN  SPACE  RBT 
PROGRAM  BY  NASA  CENTERS.  GOVERNMENT  AGENCIES. 
UNIVERSITIES.  AND  INDUSTRIAL  RESEARCH  ORGANIZATIONS 

riNTTIATIVES:  UNIVERSITY  RESEARCH  | 

Figure  1.  Space  technology  long  range 
plan  objectives 


0  TO  DEVELOP 

0  DESIGN  CONCEPTS.  ANALYSIS.  AND  TESTING  TECHNIQUES 
0  ADVANCED  COMPONENTS 

0  FOR  CONTROLLING  AND  GUIDING  EARTH-ORBITING  SPACECRAFT 
INCLUDING 
0  LARGE  ANTENNA 
0  PLATFORMS 

0  PAYLOADS  AND  EXPERIMENTS 
0  SPACE  TRANSPORTATION  SYSTEMS 

Figure  2.  Space  controls  and 
guidance  specific  objective 


This  objective  is  quite  general  but  covers  a  number  of  thrust  objectives  shown  in  Figure  i. 
Although  the  thrust  objectives  are  focusea  toward  a  particular  area  or  mission  a  substan¬ 
tial  portion  of  the  resulting  technology  will  have  general  applicability  to  ail  aieas. 

CONTROL  AND  GUIDANCE  R&T  THRUST  OBJECTIVES 


TO  OERIVE  NEW  CONCEPTS  AND  APPROACHES  TO  EFFECTIVE 
CONTROL  OF  LARGE  DYNAMIC  STRUCTURES. 

0  TRANSPORTATION 

TO  DEVELOP  ADVANCED  CONTROL  AND  GUIDANCE  CONCEPTS 
FOR  CURRENT  AND  FUTURE  TRANSPORTATION  SYSTEMS 
WHICH  ARE  MORE  TECHNICALLY  EFFICIENT  AND  WHICH  LEAD 
TO  MORE  COST  AFFORDABLE  FUTURE  SPACE  TRANSPORTATION 
MISSIONS. 


0  SPACECRAFT 

TO  DEVELOP  ADVANCED  CONCEPTS  AND  TECHNIQUES  FOR  CONTROLS, 
PRECISION  POINTING.  AND  STABILITY  AND  GUIDANCE  AND  NAVIGATION 
OF  LARGE  ANTENNAS.  PRECISION  REFLECTORS  AND  ADVANCED  EARTH 
ORBITAL  SPACECRAFT 

0  SPACE  STATION 

TO  ADVANCE  THE  UNDERSTANDING  AND  STATE  OF  THE  ART  IN  POINTING 
AND  STASILI2ATI0N  OF  LARGE  SYSTEMS  CONTROLS.  MULTIBODY  GUIDANCE 
AND  CONTROLS.  AND  ADVANCED  GUIDANCE  AND  CONTROL  DEVICES 
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In  the  itnoait'i;  aioa  NAaA  is  cuiiently  investitjat  iny  a  nuniber  of  Lncorol  icn  i  jioa.s 
whicn  t.avo  ooen  iJentitieo  as  bciny  deticient  for  applications  Co  laryo,  hiyhly  llcxinl..- 
spaceciatt  ana  reyaiiiny  tuither  development  and  validation  throuyt!  experimental  liuidware 
testiny.  e'jrrenC  tliooretical  deficiencies  identified  from  technology  surveys  and  system:; 
studies  are  snown  in  Taiiie  1.  Most  of  the  indicated  theoretical  areas  are  being  inves¬ 
tigated  through  a  combination  ot  university  grants  and  NASA  center  research  programs. 
Another  area  of  research  begun  in  1983  is  in  the  applications  of  distributed  systeni  tneory 
to  control  of  large  space  structures.  The  term  distributed  systems  as  used  here  has  two 
meanings.  One  is  control  theory  for  distributea  parameter  system  modeling  and  the  second 
IS  the  theory  for  systems  requiring  spatially  distributed  multi-point  sensing  ana  actu¬ 
ation.  Many  large  space  structure  configurations  being  considered  in  the  NASA  mission 
model  will  require  multi  sensors  and  actuators  distributed  in  some  fashion  throughout  the 
structure.  Therefore,  one  must  consider  the  spatial  distribution  of  sensors  and  actuators 
whether  treating  the  problem  from  the  finite  elenients  or  continuum  model  approach. 


Table  1.  Current  Theoretical  Deficiencies  in  Control  of  Large  flexible  Spacecraft 


Fundamentals  of  Control 
of  Highly  Flexible 

Systems 

Adaptive/Learning  Control 

Optimal  Management  of 
Distributed  control 
Systems 

Modern  vs  Classical 

Linear  Quadratic  Gaussian 
Decoupled  Control 

Computer  Aided  Design 

Dual  Level  Control 

Modeling  for  Analysis 
Parameter  Sensitivity 

Robust  Control  Laws 

Identification  of  Most  Important 
Parameters  for  Control 

Sensitivity  of  Real  Time  Models 
Parameter  Identification 

Real  Time  Automated  Control  Laws 
Parameterization  of  Shape 

Conf igurations 

Criteria  for  Closed  Loop  Adaptation 

Fault  Modeling 

Failure  Detection 
be  If- Reorganization 
Analytic  Redundancy 
OptiiTial  Reduced  Capa¬ 
bility  Performance 
Sys  terns 

In  adaptive  control  research,  techniques  are  being  investigated  lor  their  future 
application  to  control  of  large  space  structures  where  uncertain  or  changing  parameters  of 
the  system  may  oestabilize  conventional  control  system  design.  In  one  ground  experiment 
using  a  large  flexible  hanging  beam  and  realistic  haruware  the  application  of  a  state 
space  adaptive  filter/controller  was  demonstrated  which  accounted  for  an  intentional  error 
in  its  3rd  eigenvalue  or  modal  frequency.  Using  colocated  control  sensors  and  actuators, 
and  a  high  fidelity  structural  model  and  feedback  controller  with  a  Kalman  filter  and 
optimal  control  laws,  beam  vibrations  were  rapidly  damped  tollowing  an  impulse  disturbance 
at  the  free  end.  With  the  intentional  error  of  approximately  20%  in  the  3rd  mode  replaced 
in  the  model,  the  control  system  was  shown  to  be  unstable  tor  the  same  initial  conditions. 
However  after  parameter  identification  and  adaptive  estimation  techniques  were  added  to 
the  feedback  loop,  the  system  stabilized  after  one  and  one-halt  cycles  of  vibration.  Heal 
time  computational  requirements  were  handled  by  a  Motorola  6502  microprocessor  operating 
at  1  MHz. 

In  a  related  area  of  research  adaptive  identification  for  the  dynamics  ot  large 
space  structures  is  being  investigated  using  lattice  filters.  The  approach  illustrated  in 
Figure  4  is  for  the  problem  of  identifying  the  structural  dynamic  character istics  of  basic 
structures.  The  lattice  filter  provides  an  algorithm  based  on  least  squares  estimates 


Figure  4.  Distributed  adaptive  control 


for  generating  an  orthonormai  basis  for  the  measurement  data  using  measuicment  samples. 
Using  this  approach  a  modal  system  description  is  avoided  and  hence  the  a  priori  speciti- 
cation  of  model  order  (i.e.,  number  of  modes  requiring  control  is  not  specified).  Instead 
the  systems  order  is  recursively  determined  on-line,  as  would  be  required  in  flight,  along 
with  its  parameters.  The  use  of  recursive  lattice  filters  are  widely  used  in  adaptive 
signal  processing.  The  next  step  in  this  research  will  be  the  application  of  lattice 
filters  to  two  dimensional  structures. 

Large  space  systems  (LSS)  control  technology 

For  control  of  future  large  space  systems  a  number  of  technology  needs  have  emerged. 
Large  as  used  here  is  a  relative  term  for  those  systems  which  are  larger  than  systems  flown 
to  date  and  which  carry  high  performance  requirements.  Many  of  these  needs  serve  as  the 
focus  for  principal  activities,  shown  in  Figure  5,  in  the  space  station  and  spacecraft  pro¬ 
grams.  If  we  look  at  the  NASA  LSS  mission  overview,  shown  in  Figure  6,  we  have  a  number  of 
mission  classes  for  which  the  objectives  are  quite  distinct  from  past  missions.  Space  sta¬ 
tion  will  be  characterized  with  designs  providing  for  evolutionary  growth,  low  life  cycle 
cost,  and  user  accommodation.  The  NASA  large  space  antenna  missions  can  be  categorized 
into  three  major  classes:  radio  frequency  (RF)  antennas,  large  segmented  reflectors,  and 
LSS  flight  experiments.  The  large  RF  antenna  class  includes  near-term  communications 
missions,  such  as  the  Land  Mobile  Satellite  System,  radiometry  missions,  and  the  advanced 
communications  missions.  The  segmented  reflector  systems  will  require  multifaceted  solid- 
panel  reflectors  deployed  on  supporting  structures  to  meet  the  requirements  for  IR  and 
submillimeter  astronomy.  Flight  experiments  to  validate  LSS  technologies  may  involve  fun¬ 
damental  structures  with  associated  control  and  build  up  to  a  fully  deployable  large  space 
operational  antenna.  In  the  following  sections  control  technology  needs  and  requirements 
for  these  missions  will  be  highlighted. 


CLASS 

OBJEGIVES 

LARGE  SPACE  SYSTEMS  CONTROL  TECHNOLOGY 

•  PIATFORAAS  AND  SPACE  STATIONS 

•  MULIlPlf  USER  SPACE/EARIH  OBSERVATIONS 

•  UNMANNED  SPACE  PUTFORMS 

•  TRANSPORTATION  NODE  TO  HIGHER  ENERGY 

•  ANTENNA  CONTROL 

•  MAFMD  SPACE  STATION 

lEVElS 

•  PLATFORM/STATION  COimtOL 

•  ASSEMBLY,  CONSIRUaiON 

•  CONTROL  OF  DISTRIBUTED  PARAMETER  SYSTEMS 

•  O-g  PROCESSING.  MANUFADURING 

•  SYSTEMS  IDENTIFICATION 

•  LARGE  ANTENNAS  30-100  m 

•  COMMUNICATIONS 

•  FIGURE  CONTROL 

*  MESH  DEPlOYABIfS 

•  RADIOMnRYlEARTH  RESOURCES 

•  EXPERIMENTAL  VALIDATION 

•  TRUSS 

•  RAOIOASTRONOMY 

•  MODEL  ERROR  ESTIMATION 

•  EtiaROSTATIC  MEMBRANE,  etc. 

•  AnaPTiUF  roRfTROl 

•  AfTTENNA  CONTROLLER  DESIGN  BASED  ON  RF 

•  SEGMENTED  REFliaORS  10-30  tn 

•  IR.  SUBMIELIMntR  ASTRONOMY 

•  ADVANCED  GUIDANCE  AND  CONTROL  COAAPDNENTS 

•  LARGE  DEPlOYABlE  REFUCTOR 

•  FLIGHT  EXPERIARENT  DEFINITION  AND  DESIGN 

•  LSS  FLIGHT  EXPERIMENTS 

•  VALIDATION  L  >NABIING  TECHNOLOGIES 

•  INTERVEMCLE  CONTRDL 

•  ESTABLISH  REQUIRED  FLIGHT  DATA  BASE 

Figure  5.  Principal  activities 


in  program  Figure  6.  NASA  LSS  mission  overview 


Space  station 

A  number  of  space  station  concepts  have  been  evolved  in  recent  times  as  shown  in 
Figure  7.  The  figure  on  the  right  shows  space  station  in  its  most  current  conceptual 
approach  which  is  characterized  by  evolutionary  arid  modular  growth.  There  are  many 
physical  factors  which  must  be  considered  in  such  an  evolutionary  process  for  space 
station.  Some  of  these  important  factors  are  shown  in  Figure  8.  All  of  these  physical 
factors  will  seriously  impact  the  station's  control  systems  performance  and  operation  in 
its  initial  configuration  and  potentially  much  greater  as  the  station  evolves  into  mote 
advanced  configurations  with  additional  modules  and  provisions  for  vehicle  servicing 


1.  IMdUSING  ORBITAL  HASS 

2.  NIGRATIHC  CEKTER-OF-GRAVITV  LOCATICAS 

0  STATIOH  BUILD-UP 

0  CHANGE-OUT  OF  WJOR  ELEIfNIS  (SOLAR  ARRAYS,  RAOIATOKS) 
S,  VARYING  AEROOYNANIC  AND  GRAYIU  GRADIENT  lOROUES 
0  ORBIT  RE-BOOST 

R.  CHANGING  STRUCTURAL  RIGID  BODY  AND  FLEXIBLE  HOLES 
0  STATION  BUILD-UP 

0  OOCffO  ORBITIR/ORBIT  TRANSFER  VEHICLE  (OTV) 

HASS  TRANSFER  OF  FUEUSUTPLItS 
5.  ASTROHAUT/COHSTRUaiON  HDVEIfNTS 

Figure  8.  Physical  factors  ol  the 
evolutionary  process 


Figure  7 . 


Developing  space  station  concepts 
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(e.g.,  orbit  transfer  vehicle).  Of  tfjose  factors  listed,  t  fn-  i  actor  ol  r.-Mung  i  ng  ;;iiact  .tji 
rigia  body  and  flexible  modes  imposed  during  the  station  ijuilo-up  aiio  docxing  oporatio;.  . 
with  the  station  places  new  and  unique  requirements  on  s.pace  control  systems.  l  r;  wtc  i 
to  assess  the  evolutionary  changes  requirea  in  a  control  tectinology  development  prooiu.; 
which  addresses  large  space  systems  a  controls  technology  roaomap  was  formulateo  as  ..nowsi 
in  Figure  9.  The  chart  illustrates  technology  reauiness  tor  L.Sb  as  projected  r.y  tiio  long 
range  plan  for  control  technology  development.  Currently  we  see  the  s t a t e -o t - t ne - a r t  i oi 
control  of  large  structure  as  represented  by  technologies  appilieu  to  Skylafi,  Spac<-  td.ittie, 
and  recent  spacecraft  missions.  This  control  has  been  oased  on  .structures  oeing  ii  otie  1  i 


MISSIONS  SKYLAB  SPACE  STAtlON  ADVANCED  SPACE  SfATION 

SHUniE  LARGE  SPACE  ANTENNAS  LARGE  DEPLOYABLE  REFLECTORS 


TECHNOLOGIES  RIGID  BODY  CONTROL  OISTRIBUTEO  MODUUR  CONTROL  HIGHLY  AUTONOMOUS  CONTROL 

CENTRALIZED  CONTROL  SYSTEMS  lOENIlFICAIION  HIERARCHICAL  CONTROL 

ADAPTABLE  CONTROL  ACTIVE  VIBRATION  CONTROL 

LONG  LIFE  COMPONENTS 
ADAPTIVE  CONTROL 

PERFORMANCE  10'^  DEGREES  POINTING  IN  ORBIT  CONTROL 

ACCURACY  RECONFIGURATION 

IS  30  DEGREES  OF  FREEDOM  30400  DEGREES  OF  FREEDOM  100  1000  DEGREES  OF  FREEDOM 

I  S  YEAR  LIFE  COMPONENTS  20  YEAR  LIFE  COMPONENTS 

Figure  9.  Control  technology  evolution 

as  a  rigid  body  with  flexible  appendages.  Centralized  controllers  with  appropriate  notch 
filters  to  minimize  coupling  with  flexible  modes  in  the  control  bandwidth  was  adequate  to 
meet  the  requirements.  For  the  initial  space  station  such  a  conventional  approach  for 
control  may  also  be  adequate  depending  on  the  dynamics  ana  user  accommodation.  After  a 
few  or  more  modules  are  joined  in  space,  tne  structural  dynamics  will  interact  with  the 
control  dynamics  in  such  a  way  that  modern  control  theory  with  distributed  control  will 
be  highly  desirable  if  not  mandatory.  The  technology  readiness  oate  for  the  initial  sta¬ 
tion  is  in  the  1986  to  1988  time  period.  A  control  system  block  oiagram  for  the  initial 
station  might  take  the  form  of  that  shown  in  Figure  10  where  distributea  modular  control 
would  be  combined  with  some  level  of  systems  identification  and  adaptive  capability.  This 
early  form  of  adaptive  control  we  refer  to  as  adaptable  control  to  accommodate  changing 
configurations  and  operational  requirements.  Ffere  we  might  use  gain  scheduling  techniques 
for  control  in  the  absence  of  systems  ID,  and  tracking  notcli  filters  combined  with  systems 
ID  for  fine  tuning  the  adaptive  controller.  As  we  move  from  adaptable  forms  of  control 
to  fully  adaptive,  which  may  use  an  expert  knowledge  base  for  adaptive  problem  solving, 
we  might  envision  the  hierarchy  as  shown  in  Figure  11.  As  we  move  trom  the  top  to  the 
bottom  we  increase  the  autonomy  of  the  system  but  with  some  increase  in  complexity.  It  is 
felt  that  some  moderate  level  of  these  technologies  would  provide  the  baseline  in  control 


•  Gdin  Scheduiiny  Controller 
Configuration  and  operations  adaptive, 

•  Systems  Identification 

•  Mass  Propeities  Tracking 

•  Disturbance  Measurement 

•  Flexible  Structure  Beliavior 
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tor  an  evolutionary,  modular  growth  station.  For  ttie  1990's  the  objective  ot  tiie  i.-ontrulc 
program  is  to  provide  technology  options  and  opportunities  such  as  those  in  l  iguii- 

9  for  advanced  space  station  application. 

SPACKCRAFT  TECHNOLOGY 

Presently  the  spacecraft  controls  technology  program  deals  with  the  requirement:;  l oi 
large  antennas  ana  submi 1 1 irae ter  wavelength,  anu  lower,  astronomy  spacecratt.  Control 
technology  requirements  tor  these  systems  are  shown  in  Figures  12  and  13.  Control  tecnnol- 
ogy  requirements  in  Figure  li  fall  into  the  five  groups  shown  on  the  lett  with  technology 
level  of  advancement  dictated  by  the  application  areas  shown  across  the  top.  Figure  Is 
illustrates  the  broad  spectrum  of  pointing  ana  figure  control  requirements  spanned  t/y 
large  antennas.  From  the  near-term  communications  antennas  and  radiometers  to  the  vLbi 
and  advanced  communications  antennas  (such  as  the  KF  Orbiting  Deep  Space  Relay  Station), 
the  surface  and  pointing  requirements  are  at  least  1  order  of  magnitude  apart.  Froni  the 
advanced  RF  systems  to  the  IR  and  optical  systems  (such  as  the  laser  orbiting  aeep  space 
relay  station),  the  requirements  are  another  3  orders  of  magnitude  tighter  representing 
a  giant  step  in  technology  advancement. 
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Figure  12.  Antenna  control  technology  requirements 
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Antenna  surface  accuracy  vs  pointing  requirements 


Land  mobile  satellite  service 

The  Land  Mobile  Satellite  Service  (LMSS)  is  a  representative  example  within  the  large 
RF  antenna  mission  class.  The  LMSS  is  one  of  the  early  large  antenna  applications  which 
has  been  studied  in  considerable  detail  by  a  joint  team  of  JPL/NASA  and  industry  technolo¬ 
gists.  The  LMSS  is  a  multibeam  communications  mission  utilizing  a  geosynchronous-orbit- 
based  large  antenna  for  providing  telephone  services  to  mobile  users  in  the  continental 
United  States.  Two  candidate  LMSS  configurations  have  been  studied.  One  is  a  wrap-rib 
design  consisting  of  a  55-m-diameter  mesh  reflector  and  a  large  8  x  11-m  RF  feed.  These 
are  connected  by  two  booms  34  and  80  m  in  length.  The  second  configuration  is  a  hoop- 
column  design  consisting  of  a  118-m-diameter  mesh  reflector,  an  88-m  mast,  ana  four  feed 
arrays  of  4  x  4  m  each.  Each  of  the  systems  weighs  about  10,000  lb  and  have  moments  of 
inertia  of  10^  to  10^  kg-m^. 

The  principal  control  system  objective  for  a  RF  antenna  such  as  LMSS  operating  at 
a  frequency  of  0.87  GHz  is  to  point  the  RF  beam(s)  to  the  desired  target(s)  within 
prescribed  pointing  and  jitter  errors  (typically  0.020°  to  0.002°)  while  maintaining 
overall  system  alignment  and  figure  to  insure  the  desired  RF  performance  (main  beam  gain, 
low  sidelobes,  etc.).  Achieving  the  desired  antenna  pointing  performance  on  a  flexible 
structure  of  50  to  100  m  while  maintaining  the  static  and  dynamic  figure  within  an 
envelope  of  0.5  to  5  mm  represents  a  substantial  challenge  to  the  technology.  The  two 
LMSS  antenna  configurations  under  current  study  are  shown  in  Figure  14  under  dynamic 
disturbances.  The  distortions  and  displacements  have  been  amplified  to  illustrate  the 
pointing  problem.  The  major  contributors  to  RF  pointing  error  are  spacecratt  attitude 
errors,  feed  displacements  and  rotation,  and  dish  attitude  and  deformations. 
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Figure  14.  Antenna  pointing  problem 


Hoop-column  antenna  control  design  analysis 


A  control-design  analysis  is  under  development  for  a  hoop-column  antenna  system.  A 
NASTRAN  model  of  a  122-m-diameter  hoop'-column  antenna  is  being  used  as  the  basis  for  the 
design.  The  schematic  sketch.  Figure  15,  shows  possible  locations  for  the  two  types  of 
controllers  employed  in  the  simulated  studies.  Control  moment  gyros  and/or  reaction 


Figure  15.  Hoop-column  schematic 


control  jets  can  be  located  at  positions  1  to  4  along  the  mast,  and  reaction  control  jets 
can  be  located  at  positions  around  the  hoop.  The  antenna  characteristics  are  shown  in 
Table  2. 

Table  2.  Antenna  Characteristics 


Diameter  =  400  ft. 

W  =  10020  lb 

Ix  =  1.360  X  108  lb-ft2 

ly  =  1.365  X  io8  ib-ft2 

Iz  =  1.041  X  10^  Ib-ft^ 

Ixz  =  0.58  X  lo6  lb-ft2 


MODE 

(Dp,  rad/sec 

Period,  sec 

1 

.  7466 

8.42 

2 

1.346 

4.67 

3 

1.7025 

3.69 

4 

3.1613 

1 . 98 

5 

4.5294 

1  .  39 

6 

5.5905 

1.12 

Various  control  techniques  are  being  investigated  to  establish  the  most  'olidtie  and 
efficient  design  procedures  for  the  hoop-column  antenna.  figure  16  illustia'  s  typical 
results  for  two  of  the  design  methods  investigated.  The  Linear  yuauratic  c.aussian  (I.CC) 
optimal  control  technique  is  being  used  as  the  basis  for  comparison  ol  the  vaiious  t»ih- 
niques.  The  plots  show  that  the  LQG  and  decoupled  control  methods  pioducf  cumparabl' 
results  for  nulling  disturbances  in  the  three  rigid-body  modes  and  in  the  fit  si  thro.' 
flexible  (vibration)  modes.  Of  the  two  methods,  the  LuG  method  is  the  m.-re  complicated 
because  of  the  iterative  process  required  to  achieve  desired  performance.  Ihe  decoupleii 
method  provides  a  simple  closed-form  solution  and  produces  tlie  exact  1  used  -  1  oop  dynaiincs 
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Figure  16.  Comparison  of  optimal  and  decoupled  responses 


specified  for  the  system.  in  another  investigation  control  systems  were  designed  using 
colocated  output  feedback  and  LQG  techniques.  Figure  17  shows  a  comparison  of  performances 
obtained  using  the  two  methods.  The  controllers  were  designed  for  three  different  closed- 
loop,  rigid-body  bandwidths  (ms)  r  and  for  various  values  of  the  (closed-loop)  time  constant 
corresponding  to  the  structural  modes.  The  horizontal  axis  for  the  colocated  controller 
figures  indicates  the  desired  negative  shift  in  the  closed-loop  eigenvalues  corresponding 
to  the  flexible  modes,  which  is  used  as  a  design  parameter.  The  horizontal  axis  for  the  LQG 
controller  indicates  successive  increase  at  each  step  in  the  "Q"  matrix,  which  indirectly 
achieves  the  same  effect.  The  expected  values  of  pointing  errors,  feed-motion  errors,  and 
surface  errors  were  computed  in  the  presence  of  sensor  and  actuator  noise.  Although  both 
controllers  satisfy  the  requirements,  the  LQR  controller  is  found  to  perform  significantly 
better,  especially  when  a  smaller  number  of  sensors  and  actuators  was  used. 
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Figure  17.  Controller  performance  analysis 


The  second  ma]or  class  of  lar»je  antenna  missions  co  t  t  estionas  to  1  ica  t  i  uiu,  wi.i-rc 
the  wavelength  is  so  short  that  solid  reflectors  are  requireo.  I’ypical  ot  thir.  cla.ss 
is  the  Large  Deployable  Reflector  (LDR)  shown  in  Figure  18,  which  is  an  Kar th-oroi t mg 
astronomical  observatory  operating  from  50  to  1000  pm,  a  region  of  the  spectrum  where 
ground-based  mapping  of  the  sky  is  severely  limited  due  to  atmospheric  opacity.  For  the 
present  LDR  concept  shown  the  segments  are  deployed  from  their  folded  configuration  into 
final  reflector  shape.  To  satisfy  the  observational  requirements,  the  position  and 
orientation  of  each  segment  must  be  sensed  and  controlled  to  extremely  high  precision. 
The  major  components  are  the  segmented  primary  reflector,  the  secondary  reflector,  the 
backup  structure,  the  spacecraft  bus  with  its  cryogenically  cooled  focal  plane  instru¬ 
ments,  the  solar  arrays,  and  the  thermal  baffle. 


>  20  a  SECMMnO  PIIIMARY 


•  120  SEGMENIS 


>  AaiVE  FICURf  CONTROl  TO  0.S  t 

•  WITHIN  PRIMARY 

•  PRIMARY-TO-SECONDARY 


•  OVERAU  SYSTEM  POINTING  TO 

•  0.IB  ire  SN  -  ABSOLUTE 

•  0.02  arc  uc  -  STABILITY 


Figure  18.  Large  deployable  reflector 


The  potential  control  approach  shown  in  Figure  19  calls  for  an  attitude  control 
system  with  wheels  and  thrusters  to  steer  and  stabilize  the  focal-plane  assembly,  with 
attitude  sensing  provided  by  the  Guide  Telescope  and  LOS  (line  of  sight)  transfer  system. 
This  ultra-precise  IR  LOS  pointing  of  the  focal  plane  is  accomplished  by  transmitting  a 
laser  beam  from  the  guide  telescope  to  the  focal  plane  via  a  set  of  mirrors,  a  selected 
segment  reflector  surface,  and  the  secondary  reflector.  Fine  pointing  at  the  focal  plane 
can  be  enhanced  by  means  of  a  fast-steering  mirror  and  detector  electronics.  The  direction 
of  the  laser  beam  is  determined  by  the  guide  telescope,  which  uses  a  star  tracker,  IRU 
(Inertial  Rate  Unit),  and  its  own  attitude  controller  to  guide  its  orientation  relative 
to  the  stars. 


The  shape  of  the  primary  reflectors  is  maintained  by  the  Primary  Figure  Controller, 
which  drives  the  segmented  reflectors  against  the  backup  structure.  The  primary  figure 
sensor  unit  is  mounted  in  the  vicinity  of  the  secondary  reflector,  which  is  driven  by  a 
suitable  drive  mechanism  actuating  against  its  support  structure. 


COMPONENT  DEVELOPMENT 


Within  the  NASA  control  and  guidance  program  we  are  also  pursuing  the  development  ot 
sensors  and  actuator  components  to  support  LSS.  shown  in  Figure  ,!U  is  a  shape  determina¬ 
tion  system  (SHADES)  which  is  based  on  the  use  of  a  multipoint  optical  .sensor. 
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Figure  20.  Shape  determination  system 


The  aspects  of  reduced  data  requirements  and  accurate  autonomous  sensing  are  the 
key  features  of  SHADES.  In  addition  to  the  shape  estimator  design,  SHADES  will  contain 
multipurpose  subroutines  performing  such  functions  as  system  identification,  tracking  of 
feed  movement,  and  RF  pointing.  SHADES  is  an  integrated  system  and  is  made  up  of  two 
fundamental  technologies;  multipoint  spatially  distributed  sensing,  provided  by  SHAPES 
(Spatial  High-Accuracy  Position  Encoding  Sensor),  and  estimation  and  identification  raeth 
odology  for  processing  the  sensor  data  in  order  to  establish  knowledge  of  the  vehicle's 
static  and  dynamic  shape.  In  addition,  SHADES  will  contain  the  system  identification 
algorithms  required  for  estimating  poorly  known  parameters  (modal  frequencies,  damping, 
etc.)  in  the  dynamical  models.  While  the  figure  illustrates  an  application  of  SHADES  to 
a  large  antenna,  the  basic  sensing,  estimation,  and  identification  capabilities  of  the 
integrated  system  are  more  generally  applicable  to  a  wider  range  (platforms  and  space 
stations)  of  large  structure  configurations. 

The  SHAPES  multipoint  sensor  concept  shown  in  Figure  21  is  designed  to  meet  the 
need  for  a  shape  determination  and  system  identification  sensor  that  can  measure  the 
three-dimensional  coordinates  of  many  points  on  a  large  space  structure  simultaneously. 
It  utilizes  recent  developments  in  short-pulse  laser  diodes,  fiber  optics,  integrated 
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Figure  21.  SHAPES  sensor 


optics,  streak  tubes,  and  CCD  technology.  It  operates  by  measurintj  the  range  to  and 
angular  position  of  targets  on  the  structure  from  a  single  location.  Range  in  meanuieo 
by  the  time  of  flight  of  very  short  light  pulses.  The  precision  ot  this  meanu i emen t  in. 
improved  by  the  use  of  a  discrete-delay  reference  path  consisting  of  I  i  he  i -opt  i  cs  link;-, 
switched  by  integrated-optics  switches.  The  time  delay  i.s  deterinined  tjy  a  stieak  tuhe 
with  a  CCD  readout.  The  angular  position  is  determined  by  the  dirnot  imaging  if  tlin 
targets  on  a  second  CCD.  The  projected  performance  for  SHAT  US  i  10  reauings  pei  ;  i  .  on  I 
from  up  to  50  targets  per  optics  head  with  range  uncertainties  at  0.15  imn  ami  amjulai 
position  uncertainties  of  10“^  of  the  field  of  view.  More  targets  can  lie  accomiiHKia  t  no 
in  parallel  with  the  addition  of  a  second  optics  head. 


In  tne  control  Jictcutor  orea  for  lar^o  structurfc  wo  ar*-  looKiri«j  <4?  lar  j- 

control  moment  ^yroi^  (CMG)  tor  primary  contiol  Loiquo  and  c;i.  :i  mu  Jon'*-n  t  .  'Ifj'-  luf  a”  ^ 

CMC  over  developed  ls  shown  in  t'i9ace  'll  wtiioh  has  a  ir.axi.i.aiii  .ju)n,ontuni  ..-apuL-ity  oi  4  can 

tt-lb-sec.  Tnis  CM(J  was  actually  developea  in  the  eaiiy  to  a;  i  j  -  i  y  7o  ’  s  wfu-n  ouilior  spu.u- 
station  concepts  were  seriously  unuer  stuay.  Alter  reaching  a  relatively  jiivumo-vi 
of  development  the  spin  assembly  was  tested  with  the  gimbals  lockeo  and  witiiout  ti.t- 
torquers.  The  test  results  at  tnat  time  looked  encouraqinq.  In  the  i:-uitent  ptuqiaii  tru' 
assembly  has  been  taken  out  ot  storaye,  and  once  ayain  evaluated.  Tne  test  oata  appeur  t  . 
inoicate  that  tnis  large  CMG  technology  is  at  a  technology  leaoiness  levs-l  uno  1 ne  tuivpei 
represents  an  etticient  and  well  designed  actuator  reauy  tor  integration  witrj  t  ra-  wnc/ 1 
assembly.  For  such  a  CMG  useo  in  the  control  of  a  large  space  structure  u  nujiiia-i  ui 
benefits  become  apparent*  Use  of  such  a  Large  CMG  implies  lewei  ue  sa  t  u  r  a  t.  leri  ;tuii‘euvem, 

larger  momentum  inters  fewer  ijnits  for  control  and  thus  lower  we  ight/ vol  unu- ,  jno  tewr-r 

units  result  in  reduced  software  complexity* 
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APPLICATIONS :  MANNED  SPACE  STATION.  LARGE  SPACE  STRUCTURES,  LONG  DURATION  SATELLITES 
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Figure  22.  Control  tnoraentura  gyro  (CMG) 

The  effectiveness  of  itiomentum  storage  devices  for  providing  control  of  a  space  vehi¬ 
cle's  attitude  has  been  demonstrated  in  flight.  However,  in  most  cases,  the  full  potential 
of  these  devices  was  not  utilized.  One  approach  to  realizing  the  full  capability  of  a 
gimballed  momentum  device  is  to  combine  the  control  functions  associated  with  such  a  unit 
with  those  attendant  with  energy  storage  and  power  generation.  The  unit  shown  in  Figure  23 
is  the  rotating  assembly  of  a  double-gimbal  IPACS  (Integrated  Power/Attitude  Control  Sys¬ 
tem)  unit.  This  device  is  capable  of  storing  1.5  kw-hr  of  energy  and  of  delivering  2.5  kW 
of  power  at  52  Vdc.  In  addition,  it  is  designed  to  provide  20  ft-lb  of  torque  required  for 
control  of  an  unmanned  spacecraft.  The  research  on  this  device  will  concentrate  on  estab¬ 
lishing  the  generic  teciinology  associated  with  such  a  concept  to  permit  future  applica¬ 
tions.  These  efforts  will  consist  of  characterization  testing,  math  modeling,  and  utiliza¬ 
tion  of  such  models  in  system  trade-off  analyses. 
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Figure  23. 


Integrated  power/attitude  control  system  (IPACS) 


KEY  TECHNOLOGY  NEEDS 


Driver  missions  which  have  not  been  mentioned,  outside  ot  the  LSS  area,  whicii  also 
pose  advanced  control  technology  requirements,  are  those  in  the  advanced  earth  oifCervaticn 
spacecraft  area,  such  as  the  next  generation  LANDSAT  spacecraft,  and  the  Space  I'e  lescnrpe . 
In  addition  we  have  activities  in  advanced  technology  development  for  advanced  .shuttle  in 
order  to  make  it  more  cost  affordable.  Looking  at  all  of  the  control  requirements  driven 
by  future  missions  over  the  next  decade,  we  see  there  are  a  host  of  key  technology  needs 
before  us  as  shown  in  Figure  24.  Implicit  in  this  list  of  needs  for  control  of  large  struc¬ 
ture  is  the  area  of  fault  tolerance  research.  The  control  and  s tabi 1 i za t ion  system  for 
large  space  structures  is  likely  to  have  upwards  of  several  hundreds  of  components  distrib 
uted  over  the  structure  and  linked  together  by  some  form  of  data  distribution  networks. 
Even  with  extremely  reliable  components,  there  are  predictably  going  to  be  numerous  compo¬ 
nent  failures  or  equivalent  hardware  failures  through  software  faults  over  the  lifetime  of 
the  spacecraft.  The  system  must  have  the  capability  of  accommodating  these  faults  through 
system  performance  and  fault  monitoring,  failure  detection  and  isolation  (FDI),  and  fault 
tolerant  processing  and  data  distribution  and  control  law  reconfiguration.  Therefore,  the 
overall  problem  of  designing  a  control  system  for  fault  tolerance  must  be  given  attention 
in  our  future  development  programs.  The  last  item  in  Figure  24,  ground  and  flight  vali¬ 
dation  is  an  area  of  extreme  importance  because  the  acceptance  and  commitment  for  use  of 
new  technology  products  may  follow  only  after  "technology  readiness"  has  been  established. 
Verification  and  validation  of  the  technology  through  ground  and  flight  test  programs  be¬ 
come  essential.  However,  in  the  control  of  flexible  structure  the  control  technology  can¬ 
not  be  validated  on  its  own  because  of  the  close  coupling  and  interaction  with  structure. 
This  leads  us  to  another  key  technology,  area  that  needs  to  be  addressed,  the  technology 
of  control  and  structure  interaction. 

CQNTROL/STRUCTURE  INTERACTION 

The  technology  for  controlling  the  attitude  and  dynamic  deformations  of  large  space 
structures  is  one  of  the  key  considerations  for  future  space  initiatives.  Active  control 
of  flexible  structures  (ACOFS)  technology  deals  with  the  active  suppression  of  flexible 
body  responses,  as  distinct  from  present  practice  of  control  of  rigid  body  motions  and 
avoidance  of  flexible  structure  and  control  interaction. 


Major  problems 


The  major  problems  which  drive  interaction  between  control  and  structure  are  shown 
in  Figure  25.  It  is  clear  that  the  control  problems  represented  here  are  many  times  more 
complex  than  the  control  problem  experienced  in  previous  generations  of  satellites.  In 
general  the  control  system  must  be  able  to  provide  two  or  three  orders  of  magnitude  of 
vibration  alteration  beyond  what  is  obtained  through  natural  damping  or  by  means  of  visco¬ 
elastic  surface  treatment.  To  do  so,  it  may  be  necessary  to  have  as  many  as  100  flexible 
modes  in  the  control  bandwidth,  although  only  some  of  these  modes  will  be  excited  by  the 
disturbances,  and  fewer  yet  will  contribute  to  the  control  cost  function.  It  should  be 
noted  that  the  problems  listed  are  typically  associated  with  large  lightweight,  flexible 
structures,  but  they  may  in  fact  be  common  to  smaller  precision  spacecraft  where  per¬ 
formance  is  not  achievable  without  accommodation  for  these  drivers  on  the  technology. 


•  nODCLING  AND  HOOEL  REDUCTION  TECNNIOUES 

•  CONTROL  AND  STABILIZATION  OF  FLEXIBLE  STRUCTURES 

KKMl  cwnm.  ACTIVE  VIIAAIiai  DAIVIN 

OISnilUTEO  SCIISIAfi  i  ACTUATION  OISIUMANa  ISOLATION 

DcaNmAiino  contiioi  ficuac  ccntaol 

nouuw.  CVOLUTIONAAT  CONTItaL  AENOEZVOUS  I  OOCAINt 

(  UNaRTAINTY  NANAGENENT 

STSTEN  lOENIIFICATION 
AOAATIVE  APnOAOCS 

•  HARDMARE  AND  SOFTWARE 

•  GROUND  AND  FLIGHT  VALIDATION 

Figure  24.  Key  technology  needs 
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Figure  25.  Major  problems  tor 

control/structure  interaction 


Ground  based  experiments 


Over  the  past  several  years  NASA's  controls  research  program  has  evolved  many  the¬ 
oretical  concepts  to  address  deficiencies  cited  earlier  for  control  of  large  flexible 
spacecraft.  The  program  has  also  involved  experimental  activities  to  guide  .ind  validate 
the  theoretical  work.  The  experimental  work  emplo-ys  ground  experiments  of  a  generic  n,i- 
ture  with  test  articles  comprised  of  beams,  grids,  space  tru.ssefi,  etc.,  which  are  likel;' 
candidates  for  spacecraft  application.  Flexible  beam  facilities  have  employed  veitii.-ally 
suspended  beams,  hinged  at  the  end,  and  horizontal  oeam..  suspended  by  wires,  me  lacility, 
has  been  augmented  with  detail  f i n i tc -e 1 ement  models  ol  M,e  flexinle  beam,  accurate  cal¬ 
ibrations  of  the  sensors  and  actuators  which  -were  distributed  along  I  hr-  ta  am,  a  iiignly 
interactive  software  package  tor  implementing  variou.'--  control  systems,  and  ia;-er  hardw.ii' 
with  beam-mounted  retroref lectors  for  vivid  cli iplay  ol  the  bisim's  motion.  Also,  ts  coul.i 


I 


only  be  found  with  actual  natdwaie,  nonlinearities,  static  Irictioti,  hy  s  tc  i  cs  i  s ,  ;,n',i  ;■!- 

modeled  modes  severely  altered  the  control-system  design  piocess.  Tiie  rie-jni  f  ac  i  1  i  c  i ,  n.iv 
provided  useful  hands-on  experience  to  researchers  within  NASA  unci  to  university  unu  rr;- 
dustry  investigators  in  carrying  out  experimental  tests  ot  new  control  cunceptu.  lirn.  i;  , 
experiments  have  involved  snape  estimation  and  control,  distributed  control  s.ystenn;,  mo 
model  adaptive  ana  insensitive  control  approaches.  A  major  thrust  ol  iuture  work  will  in¬ 
volve  development  ana  test  of  advancea  adaptive  techniques,  distributed  control,  ,in<i  sn.ipr 
and  vibration  control.  In  past  years  static  shape  control  and  vibration  control  have 
independently  aemonst  rated .  Future  work  will  be  armed  at  comiiinincj  tiiese  oistinc,  I'oom-  ot 
operation.  Control  of  distributed  parameter  systems  based  on  continuum  monels  will  ne  in¬ 
vestigated  fuctiier  to  allow  for  generalized  sensors  (rate,  acceleration,  angular,  stiain, 
etc.)  and  possibly  generalized  actuators.  Shape  control  will  be  pertoimeu  on  more  complex, 
mu  1 1 id  imens iona 1  structures  such  as  piate-like  ana  grid-type  s 1 1 uc tii  i es . 

Another  ground  based  control  demonstration  deals  with  the  proolem  ol  s tain  1  i  z  ing  ano 
pointing  flexible  bodies  mounted  to  a  base  structure.  The  test  setup  is  shown  in  l-igur.- 
26.  The  test  article  is  a  Voyager  magnetometer  boo.m  approx  ima  tely  11  m  Ih  cn,,  and  ttie 
control  system  is  built  around  a  two-axis  gimbal  system  developed  (or  the  Aiivanceci  Ci.ii.al 
System  (AGS)  program.  Sensors  mounted  on  the  gimbal  plate  and  also  at  the  far  end  ot  ths- 
boom  are  connected  to  a  microprocessor  containing  the  control  logic.  Ttie  structure  is  ver¬ 
tical  with  both  the  upper  suspension  and  the  base  supported  on  ait  bearings.  Tests  will  tie 
conducted  to  investigate  robust  controller  designs  witli  structural  frequencies  within  tlie 
control  bandwidth. 


Figure  26.  Boom  control  experiment 


Flight  experiments 


As  mentioned  earlier,  validation  of  technology  through  ground  and  flight  test  pro¬ 
grams  may  be  essential  to  the  acceptance  and  application  of  new  technology  products.  The 
structures  and  controls  community  has  acknowledged  through  NASA  and  DoD  workshops  that 
uncertainties  with  large  structure  ground  tests  will  be  too  great  and  the  results  can¬ 
not  be  relied  on.  Although  we  expect  future  ground  testing  techniques  and  facilities  to 
be  advanced  considerably  there  will  still  exist  a  serious  deficiency  to  validate  control 
and  structure  technology  in  one  "g"  with  equivalent  full  scale  models.  Therefore,  fliglit 
technology  experiments  will  eventually  be  required  to  demonstrate  and  validate  technology 
for  control  of  large  flexible  structures.  Definition  and  design  for  such  experiments  tiar. 
been  underway  for  the  past  year  with  a  focus  on  two  types  of  flight  experiments,  MAST  ansi 
a  large  antenna,  which  have  control/structure  experiment  objectives.  MAST  is  a  Shuttle- 
attached  multi-flight  experimental  research  program  conducted  in  the  laboratory  ot  space. 
MAST  is  a  mu  1 1 i -d i sc ipl ine  effort  in  structures/structural  dynamics  and  controls  employing 
boom  type  structures  with  configurational  alternatives  as  shown  in  figure  27.  With  the' 
addition  of  distributed  actuators  and  sensors  ana  a  flight  controls  computer,  evaluation 
of  multivariable  control  techniques  can  be  initiated  using  the  baseline  cantilevered  mast. 
With  the  addition  ot  structural  appendages  with  selected  cha  r  acLer  i  s  t  ics ,  ttie  closol,- 
spaced  modal  frequencies  and  complex  coupled  motions  required  for  the  LSS  rcsoarcli  progiam 
can  be  produced.  These  phenomena  model  configurations  will  he  designed  tc  acliieve  liic  (all 
range  ot  characteristics  necessary  for  a  broad  flight  experiment  program  in  LSS  contio]'. 
and  dynamics.  The  first  flight  ot  MAST  is  being  considered  lor  ItyV-iyUH. 


Another  technology  progam  under  consideration  with  a  possible  flight  test  in  the  1984 
time  period  involves  a  large  deployable  antenna  in  the  SO  to  100  m  range  which  also  may  hi. 
flown  as  a  Shu t t le -a t tached  experiment.  A  need  exists  for  such  a  flight  experiment  liecauso 
of  the  many  uncertainties  with  large  antennas.  These  uncertainties  result  mainly  1 rom  ! lie 
fact  that  the  size  will  increase  6  to  10-  over  current  systems  and  major  i-,  aes  cannot  tv 
resolved  in  ground  tests  and  simulations.  Realistic  performance  testing  is  not  jiosi.ihle  in 
1  "g"  and  analysis  with  uncertainties  cannot  substitute  for  testing.  A  principal  otijective 
for  the  large  space  antenna  flight  experiment  will  be  to  demonstrate  and  valid. it"  a  proci'.i 
for  the  design,  test,  anri  operation  of  large  space  systems  witti  con  t  ro )  /  s  t  r  uct  u  1 1'  dynami'- 
interact  ion . 
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CONFIGURATIONAL  ALTERATIONS 


•  STRUCTURAL  APPENDAGES 

•  DISTRIBUTED  ACTUATORS  SENSORS 

•  FLIGHT  CONTROL  COMPUTER 


EXTENDED  RESEARCH  CAPABILITY 

•  CLOSELY  SPACED  MODAL  FREQUENCIES 

•  MOOES  WITH  COMPLEX  COUPLED  MOTION  (j 

•  MULTI-VARIABLE  CONTROL  'i 

•  ON-LINE  SYSTEMS  IDENTIFICATION  1; 


ii 


Figure  27. 


MAST  baseline  expansion 


Control  system  definition 
For  the  large  antenna  flight  experiment 


involve 


the  control  system  definition  will 
the  tasks  shown  in  Figure  28.  It  is  important  that  the  experiment  objective  and  approach 
address  the  high  priority  issues  shown.  It  is  likewise  crucially  important  that  results 
from  the  experiment  correlate  with  the  data  from  the  ground  test  program.  Although  the 
technology  program  described  with  a  large  antenna  flight  experiment  is  not  expected  to 
enable  technology  for  all  large  space  systems  it  is  felt  that  this  experiment  is  necessary 
to  add  to  the  validation  of  the  majority  of  technologies  associated  with  control/structure 
interaction . 


CONFROL  EXPERIMENF  OBJECTIVES  AND  APPROACH 
DISTRIBUTED  CONIROl 
SYSTEM  ID 

ADAPTIVE/MODULAR  CONIROL 
STRUCTURAL  DESIGN  CRITERIA 
GROUND  TEST  DATA  CORREUTION 

EXPERIMENT  MOUNTING  TRADES 
RIGID 
HINGES 

GIMBAL  MOUNTS 

EXPERIMENT  TESI  SEOUENCES  AND  TIMELINE 

GROUND  TEST  PROGRAM 

PRELIMINARY  CONTROL  EXPERIMENT  FLIGHT  ASSEMBLY  'EFA)  CONFIGURATION 
Figu-e  28.  Control  system  definition 

CONCLUSIONS 

Future  missions  in  space  will  require  controlling  spacecraft  which  are  both  large  and 
flexible.  The  limited  inherent  damping  and  the  uncertain  and  changing  dynamic  character¬ 
istics  of  many  of  these  vehicles,  such  as  manned  space  stations  and  large  antennas,  will 
revolutionize  spacecraft  control  requirements.  For  applications  requiring  high  system 
performance,  control  synthesis  techniques  must  address  model  spillover  and  be  robust  and 
sometimes  adaptive.  Initial  on-orbit  testing  will  be  used  to  more  accurately  model  the 
dynamics  of  a  new  large  space  structure,  so  that  its  control  law  can  be  fine  tuned  to 
enhance  system  performance  and  to  ensure  stability. 

In  preparation  for  the  time  that  such  control  systems  are  required,  considerable 
research  and  technology  development  is  necessary.  A  program  is  in  place  at  NASA  for  the 
development  of  active  control  technology  to  support  major  initiatives  for  space  station 
and  advanced  spacecraft.  Space  station  is  character i zed  by  requirements  for  evolutionary 
and  modular  growth  presenting  new  challenges  in  distributed  modular  control,  utilizing 
forms  of  systems  identification  for  multi-state  active  control.  Similar  requirements 
press  the  technology  needs  for  spacecraft  systems  such  as  large  communication  satellites 
and  submillimeter  wave  astronomy  missions.  A  number  of  key  control  technology  needs  are 
required  for  these  and  other  future  NASA  missions  together  with  an  integiated  control/ 
structures  technology  flight  experiment  to  demonstrate  and  validate  technology  for  large 
flexible  structures. 
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RESUME 

L ’ accroissement  continu  de  la  duree  de  vie  des  satellites  est  ou  va  hientot  devenir  critique  vis-a-vis  du 
maintlen  de  la  fiabilite  du  systeme  et  du  risqtie  d ' obsolescence  de  la  mission. 

Le  recours  a  la  redondance  des  equipements  pour  assurer  la  fiabilite  devient  une  solution  de  plus  en  plus 
penalisante  compte-tenu  en  particulier  des  capacitcs  limitees  des  moyens  de  lancement.  D'autre  part,  la 
conception  classique  des  satellites  ne  permet  pas  d’eviter  l*obsolescence  de  la  mission  sur  de  longues 
durees  de  vie. 

Pour  remedier  a  ces  problemes,  deux  methodes  possibles  complementaires  sent  presentees  : 

-  L'utilisation  de  1 ' intelligence  a  bord  des  satellites,  permettant  par  une  meilleure  gestion  de  la 
configuration  et  des  sous-systemes  de  la  plate-forme,  d’assurer  un  haut  niveau  de  dispon ibi I i te  au 
satellite. 

-  L'entretien  en  orblte,  permettant  de  reajuster  periodiquement  la  fiabilite  et  I'autonomie  de  la  plate- 
forme  et  autorisant  egalement  l‘eventuel  echange  de  la  charge  utile.  Cette  solution  fait  appel  a  des 
techniques  nouvelles  :  le  rendez-vous,  I'assemblage  et  la  robotique  spatiale. 

12.1  -  INTRODUCTION 

La  duree  de  vie  operationnelle  des  satellites  actuellement  en  orbite  est  de  I’ordre  de  7  a  10  ans  pour 
les  satellites  de  telecommunications  et  de  3  a  5  ans  pour  ceux  situes  en  orbite  basse.  Si  certaines 
missions  s ' accommodent  assez  blen  de  cette  limitation,  voire  generent  elles-mcmes  des  exigences  inte- 
rieures,  une  grande  partie  benef icieralent  d’une  plate-forme  de  duree  de  vie  accrue,  tant  d'un  point  de 
vue  service  que  d'un  point  de  vue  economique  :  ce  pourrait  etre  le  cas  de  missions  de  tclccommunicat ions , 
de  navigation  ou  d ' observat ion . 

De  fait,  I'analyse  de  la  duree  de  vie  specifiee  des  satellites  de  telecommunications  montre  que  celle-ci, 
qui  etait  de  I'ordre  de  1  a  3  ans  au  debut  des  ann*’es  hO,  est  passee  success Ivement  a  S  ans,  puis  7  ans 
(NATO  III,  INTELSAT  TV,  Actuellement,  les  satellites  de  nouvelle  generation  sent  concus  pour  cles 

durees  de  vie  de  7  a  10  ans  (INTELSAT  6). 

Toutefois,  I ' acc ro 1 ssemen t  de  la  duree  de  vie  dt*s  satellites  ou  des  p I ates-f ormes ,  ne  va  pas  sans  contre- 
partie  ;  ainsl  par  exemple,  une  augmentation  correlative  de  leur  masse  ciui  risque  do  so  heurtcr  aux 
capacites  des  lanceurs,  l’utilisation  d  ’  equ  i  pemen  t  s  compatibles  aver  cette  duree  <ic  vie,  1  ’  assuratice  d'un 
certain  niveau  de  fiahilit*  et  de  d  i  spon  { hi  1  i  t  e  pendant  ti^utc  cette  duree, 

12.2  -  CAUSES  DE  .iMlTATfnN 

Concevoir  une  plate-forme  pour  uni‘  .t-rraine  <lur'‘e  de  vie,  c^'est  roncev<*jr  chaque  s.'us-svst  «me ,  rh.iqiK' 
ensemble  d  '  equ  i  pemen  ts  pour  ••xireiiie.  ('ela  suppi'so  tgalemerU  qtie  l<u!os  rau‘5(“s  I'ossibKv'  do 

limitation  de  la  duree  de  v  i  r  out  -f-  prl-e'.  .-n  •.  I'mptr  do  ‘*’rte  tpi'elles  n '  appa  ra  i  -  st'n  t  p.e  .,vaat  1  .i  liite 


prevue . 


Ainsi,  cinq  tvpe?  de  limitcitions  penvent  etn*  «‘ons idcrcs  : 

!:■ ' ressources  non  renouvcl.ihles  :  cot  nppauvrissomoiU  concoriio  osson  t  i  o  1  1  oiric  r  t  lis 
(propulsion  et  controle  d'attitudo),  mais  peut  Aventue i lenient  toucher  aussi  !es  lubrifiants,  Cet 
epuisement  d'ergol  est  une  cause  de  degradation  dbrerministe  et  peut  etre  pndit  on  utiHsant  un  iTMid.  Ie 
de  consommat  i  on ,  si  hien  que  la  masse  d’ergols  iiecessairo  pour  vino  duree  de  vie  donnee  pent  i-lte 
evaluee  avec  une  bonne  precision.  Toutefois>  le  problAtre  devient  plus  critique  si  des  operations 
couteuses  en  ergols  et  non  prevues  devionnent  ntU'e'^sa  i  res ,  car  elles  piuirraient  conduire  a  un  ap;  an- 
vrissement  premature  du  satellite  en  ergnls. 

-  I.a  decroissance  des  performances  du  systeme  :  cette  dAcroissaine  resulte  de  pfunomenes  d'usure  ou  <!(> 
degradations  de  performances  de  sous-systemcs »  et  peut  etre  determiuiste  ou  statistique,  Cette  cause  de 
limitation  affecte  pr inc ipalement  les  panneaux  solaires,  les  batteries,  les  optiques,  les  assemblages 
mecaniques.  les  radiateurs  thermiques.  Cela  conduit  a  dimensionner  certains  Aquipements  (panneaux 
solaires)  en  fonction  des  specifications  en  fin  de  vie,  ce  qui  peut  resulter  en  un  surd imcns i onnement 
en  debut  de  vie.  D'autres  equipements  peuvent  presenter  des  limitations  int r inscques  de  duree  de  vie  du 
fait  de  leur  conception  ou  leur  technologle  et  deviennent  alors  critiques. 

-  Des  pannes  du  systeme,  qui  sont  essent iel lament  aleatoires  et  peuvent  intervenir  dans  n’importe  quel 
sous-systeme.  Ces  pannes  peuvent  etre  definitives,  ou  conduire  a  une  degradation  de  la  mission,  <mi  ne 
pas  affecter  la  mission  mais  reduire  la  fiabllite  du  systeme. 

-  L*erreur  humatne  ou  une  conception  inadequate  de  certains  elements. 

-  L *  obsolescence  de  la  mission,  qui  est  essent iel lement  relative  a  la  charge  utile. 

Parml  ces  causes  de  limitation,  la  degradation  des  performances  et  certaines  detaillances  dues  a  I'usure 
pourraient  etre  predictibles  et  done  influencer  le  dimensionnement  des  equipements  (panneau  solaire)  ou 
la  contiguration  et  1 ‘uti 1 isat ion  de  sous-systemes  (schema  de  redondance,  plage  de  fonct ionnement ) .  I.es 
pannes  aleatoires,  quant  a  elles,  peuvent  etre  repr^sentees  par  une  courbe  de  fiabilite  qui  donne  la 
probabiiite  de  bon  fonctionnement  du  systeme  en  fin  de  vie.  Le  schema  de  redondance  des  equipements  sera 
congu  pour  optimiser  cette  probabiiite. 

L’apparition  et  I’evolutlon  des  degradations  ou  des  detaillances  des  equipements  dependent  du  choix  dc  la 
technologle,  mais  elles  sont  egalement  tavorisces  par  1 ’environnement  dans  lequcj  se  trouve  le  satel¬ 
lite  :  par  exemple,  les  niveaux  de  radiations  auxquels  sont  soumis  les  equipements  (cellules  solaires, 
revetements  thermiques,  ...)  et  les  composants  sont  un  facteur  important  de  degradation  et  varient 
suivant  la  position  orbitale  du  satellite  (altitude,  inclinaison)  ;  de  memo  pour  les  cycles  thermiques  ou 
les  perturbations  diverses.  Elles  sont  egalement  lives  aux  conditions  d ' ut i 1 i sat  ion  operationnelle  des 
equipements  (temperature,  cycles  de  fonctionnement,  ...). 

L’ accroissoment  de  la  duree  de  vie  d'un  satellite  conduit  naturel 1 ement  pour  une  technologic  donnee,  A  un 
accroissement  de  sa  masse,  voire  de  son  volume,  essent iel 1 ement  a  cause  de  1 ’ augmen tat  ion  induite 
d’ergols  et  d ' equipements  redondants.  Or,  une  conception  harmonicuse  suppose  une  repartition  optimale 
entre  le  nombre  d ' equipements  en  redondance  et  la  masse  disponible  d’ergols,  dc  telle  sorte  que  I'cpui- 
sement  des  ergols  et  I’apparition  de  phenomvnes  d'usure  ou  de  degradation  du  systeme  coincident  avec  la 
limite  de  duree  de  vie  specif iee.  Une  duree  de  vie  specif  ice  devrait  done  corrospondre  a  une  repartition 
op*'imale  des  masses  du  satellite,  cette  repartition  ctant  elle-meme  fonction  de  I'ctat  de  I'art  de  la 
technologle  ;  or  cette  repartition  n’est  jamais  libre,  ne  serait-ce  que  par<'e  que  la  masse  totale  <hi 
satellite  est  limitce  par  les  capacites  du  lanceur,  Cette  limitation,  due  au  lanceur,  pourrait  toutefois 
etre  surmontee  par  1  ’  ut  i  1  isat  ion  de  techniques  de  rcnde/'-v(»us  et  assemblage  en  orbite  qui  permet  t  ra  i  ent 
d’implanter  des  satellites  ou  p 1 ates-formos  de  masse  rui  volume  au-dela  dos  pe r t ormanccs  du  lanceur. 

La  courbe  de  fiabilite  est  egalement  un  parametre  important  povir  la  conceptif^n  ciu  satellite  car  elle 
influence  la  duree  de  vie  predictible.  Cetto  duree  de  vie  est  fonction  de  la  fiabilite  .iccept  al-'l  c  on  fin 
de  vie,  si  bien  que  la  courbe  dolt  etre  aiustec  a  la  flurec  de  vie  roquise. 


12.1  -  SOLUTIONS  KNVISAr.EABLr.S 

Chaque  element  a  done  sa  duree  de  vie  propre  et  peut  de^’enir  critique  vis-,i-vis  d'une  .mgmentat  ion  -!c  la 
duree  de  vie  d»'  satellite,  suivant  ic  niveau  de  1  *  e-  j  ,;ence . 


Plusieurs  solutions  sont  alors  ein  isageablos  pour  y  romodier  (voir  fip..  1). 

L’ne  solution  classique  esL  1  *  auto-main  tenance ,  File  oonsiste  a  redonder  les  tqu  i  pemtuit  s  (ou  les  1  oiu - 
tions)  critiques  afin  de  diminuer  les  risques  de  panne  du  systome  ou  d'accroTtre  !a  durt  o  de  vie  dt* 
I'ensemble  redonde  au-dela  des  dates  d'apparition  possible  des  phdnomenes  d'usure  do  I  '  <-qtjipement  c-n 
f  onct  ionnement .  [.'utilisation  de  I'oquipement  rcdondant  est  tine  solution  pour  Ci>mpenser  la  drfail  lance 
d’un  equipement  nominal  et  alnsi  continuer  la  mission  ;  cependant,  des  dd^rariat ions  peuvc‘ut  apparaitre 
egalement  sur  des  equipements  en  attento»  si  bien  que  leur  duree  de  vie,  quoiquo  supdrioure  a  cello  de 
I'equipement  en  fonctionnement ,  pourrait  etre  elle-memc  une  limitation  a  la  durto  do  vie  du  satellite.  Do 
plus,  cette  solution  conduit  a  un  accroissement  de  la  masse  du  satellite. 

L'ne  autre  solution  consiste  a  ameliorer  la  technologic  des  equipements  critiques  ou  a  utiliser  de  nou- 
velles  technologies  dans  le  but  de  diminuer  leur  taux  de  ddfalllance  ou  d'augmenter  leur  durdc  de  vie 
s'ils  sont  sujets  a  degradation  et  usure,  ou  eventuel 1 ement  d'ameliorer  leur  rendement  afin  de  dimintier 
leur  masse  au  lancement  a  performance  dgale.  C'est  le  cas  par  exemple  des  batteries  NiH2  dont  on  espire 
une  duree  de  vie  meilleure  que  celle  des  batteries  NiCd. 

Toutefois,  les  ameliorations  technologiques  et  les  nouvelies  technologies  peuvent  avoir  egalement  leurs 
propres  limitations  ;  aussi,  une  autre  solution  peut  consister  a  devclopper  1  '  Intel  1 igence  de  bord  du 
satellite  pour  optimiser  la  gestion  des  sous-systemes ,  pour  ameliorer  les  conditions  d ' ut il isat ion  et  de 
fonctionnement  des  equipements  critiques  (gestion  des  batteries  et  de  leur  controle  thermique  par  exem¬ 
ple).  Les  nvantages  et  les  posslbilites  de  cette  solution  sont  decrits  dans  le  cliapitre  suivant.  Cette 
solution  permet  d'ameliorer  la  courbe  de  fiabilite  du  systeme  ou  de  retarder  I'apparition  de  degradations 
ou  d'autres  causes  de  limitation  de  duree  de  vie  du  systeme. 

L'entretien  en  orbite  du  satellite  est  une  solution  interessante  car  elle  permet  d’effectuer  periodi- 
quement,  dans  une  certaine  limite,  une  remise  a  niveau  du  satellite  ;  ainsi,  pourrait-on  echanger  les 
equipements  critiques  a  une  date  predictible  en  function  de  la  technologic  employee  ;  ainsi  pourralt-on 
intervenir  en  orbite  dans  certains  cas  de  pannes  ou  pour  amener  des  ergols  supplcmentaires.  Toutefois, 
cela  suppose  une  conception  adaptce  du  satellite  et  1 'utilisation  de  vehicules  specifiques,  Les  avantages 
et  inC'Uivenients  do  cette  solution  sont  presentes  dans  Ic  chapitre  S, 
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12.4  -  FTILISATION  PF  I. '  I NTFl.L ICKNCK  l)F  WOm 

fin  entend  par  i  or  o )  1  i  genet*  de  bard,  i>u  intelligence  emb.irqu'C,  I'ensemble  lies  Imucles  dt'  ('ontro)t*  auto- 
rrntique  et  des  dvr  is  inns  prises  a  bor<i  tie  manfere  nutojmmn,  saivi  i  n  t  crvt'n  t  inn  du  snl  en  (  enps  les 

satellites  ac  t  tie  1  1  omen  t  en  orhfte  ne  pt>s.sndent  qu’un  niveau  ru«l  inert  a  i  re  d  '  i  n  t  e  1  1  i  lU'in  i*  do  bord,  qtii  oil 
niitro  est  gonfralement  fortement  spccialisoe  fco^n  e  d’attitudo  utili'aint  iloj;  I'.sk  It'*^  do  (nnirolo 
anaingiques  ou  num'riques,  docisif  lo  passage  en  -•Mle  survii*.  ot.-...j.  topood.int  .  I'-urivt-t'  do  nitrn- 
ralrulateurs  oor.patibies  avec  )  *  env  i  mnnement  spat'  •'  /a  permoftio  <l '  .tuv'*  t-nJ  or  1  ’  i  r  I'l  - 1  t  .in<  o  of  'a  linos'^o 


to  1  '  i n t e  1  1  i gene e  t'mharquoe  dans  des  proportions  tc*n.  iiIorablo>-. 
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IJ ,  4 . 1  -  Role  de  I  *  Intel  1 igence  embarquee 

Le  role  de  I '  intelligence  de  herd  dans  1 'accroisseinent  de  la  dun'-e  de  vie  des  satellites  pent  etre 
multiple  et  s’exercer  au  niveau  systeme  aussi  bien  qu*au  niveau  sous-systeme  ou  equipeinent  ;  en  parti- 
culier,  les  domaines  suivants  peuvent  beneticier  de  ['utilisation  de  1 ' inte 1 1 i gence  embarquie  : 


-  Amelioration  de  la  fiabilite  intrinseque  de  chaque  fonction  par  1 'ut il isat ion  de  technologies  digitales 
et  de  methodes  de  controle  par  micro-calculateurs.  I'n  seul  calculateur  pent  gerer  plusieur:.  bjuicles  de 
controle  en  parallele,  ce  qui  conduit  a  une  simplification  de  1 'electronique  de  decision  et  a  une 
reduction  du  taux  de  panne  global  car  les  niveaux  d * integrat ion  et  de  fiibilite  des  micro-calculateurs 
sont  nettement  superieurs  a  ceux  de  1 'electronique  convent ionncl 1 e. 


-  Gestion  plus  fine  des  elements  consommables  comme  les  batteries  ou  les  ergols.  La  mise  en  oeuvre  Je 
maniere  automatique  a  bord  de  modeles  de  gestion  sophistiques  permet  d'optimiser  en  temps  reel  la 
gestion  des  consommables  en  fonction  des  besoins  effoctlfs  du  service  requis.  De  plus,  il  est  possible 
d'introduire  la  notion  de  prevision  (de  charge  ou  de  couples  perturbateurs  par  excmplc)  dans  ces 
modeles  de  gestion  optimale. 


-  Amelioration  de  la  disponibil ite  du  service  ottert.  Seul  un  haut  niveau  d ' intel ligence  embarquee  peut 
limiter  les  consequences  d'une  panne  d'un  equipement  et  regenerer  les  fonctions  nominales  du  satellite 
dans  un  delai  suffisamment  court. 


Il  reste  toutetois,  comme  condition  prealable  a  I'emploi  de  micro-clectronique  on  orbite  pendant  de 
longues  annees,  que  la  technologie  selectionnee  doit  presenter  une  bonne  resistance  a  1 ' envi ronnement 
spatial.  Ainsi,  la  technologie  TTL  est  nature l lement  capable  d'une  duree  de  vie  en  orbite  d’une  dizaine 
d'annees  alors  que  seules  certaines  technologies  CMOS  sont  susceptibles  de  convenir,  generalement  grace  a 
des  traitements  appropries. 


12.4,2  -  Applications  potentlelles  de  1 ' intelligence  embarquee 


L ' ut il isat ion  de  1 ' intelligence  embarquee  pour  gerer  les  sous-systemes  permet  d'optimiser  les  conditions 
de  f once ionnement  des  differents  equipements  et,  par  ce  biais,  a  une  action  benefique  sur  la  duree  de 
vie. 


12.4,2.1  -  Sous-systeme  de  generation  et  distribution  d'energie  electrique 


Pour  chacune  des  trols  fonctions  principales  du  sous-systeme,  a  savoir  production  et  stockage  d'energie 
et  adaptation  a  la  charge,  1 ' ut i 1 isat ion  d * intel li gence  embarquee  conduit  a  une  amelioration  des  condi¬ 
tions  d ' ut i 1 isat ion  des  elements  critiques. 


-  La  gen«  ration  de  puissance  est  souvent  effectuee  au  moyen  de  panneaux  de  cellules  solaires  qui  presen- 
tent  un  point  de  rendement  maximum  dependant  des  conditions  thermiques  et  du  vieillissemeat ,  Il  est 
possible  de  maintenir  le  point  de  fonct ionnement  au  voisinage  de  1 'optimum  en  faisant  varier  en  perma¬ 
nence  la  charge  de  la  batteric  en  sens  Inverse  de  la  consommation  du  satellite,  tine  telle  boucle  de 
controle  necessite  la  puissance  et  la  souplesse  d'un  micro-calculateur ,  et  elle  optimise  simultanement 
le  rendement  des  generateurs  solaires  et  la  charge  de  la  batterie.  Le  gain  en  duroe  de  vie  utile  des 
panneaux  solaires  est  d'autant  plus  important  que  le  profit  dc  consommation  de  la  mission  est  variable. 
Dans  son  principe,  une  telle  boucle  de  controle  est  ogalement  valable  po.ir  un  generateur  isotopique, 

-  Pour  limiter  le  vlei 1 1 issement  de  la  batterie,  les  operations  de  charge  et  decharge  et  les  cvcles 
d'entretien  doivent  respecter  des  procedures  tres  precises  qui,  en  pratique,  no  peuvent  ctre  pleinem<.‘nt 
mlses  en  oeuvre  sans  un  micro-calculateur  embarque.  Fn  ettet,  la  gestion  de  la  charge  de  la  batterie 
doit  etre  couplde  avec  ['optimisation  du  point  de  fonctionnement  des  generateurs  solaires  et  les 
variations  de  consommation  electrique  du  satellite  et  doit  tenir  compte  des  previsions  de  conson r at i on 
1  moyen  terme  (quelques  revolutions,  par  excmple). 


De  plus,  ce  modele  de  gesticni  doit  integrer  la  notion  de  temps  de  reponsc  une  requete  si'l.  II  .tpp.tt.tTt 
clairement  que  [’optimisation  des  rendements  du  systeme  de  generation  de  puissanro  -suppose  la  j^rise  en 
compte  simultanee  de  nombreux  paranietrcs,  allant  du  plus  simple,  comme  la  temperature  l^atterie,  .i  lies 
notions  complexes  de  philosophie  operat ionnel le.  Le  role  dc  1 ' Intel  1  igence  de  Lord  devlent  alors  evident 
cf  necessalre. 


1-.4.J.J  -  Sous-sysCtme  de  cont^ole  thfr^ique 

La  temperature  moyenne  He  fence ionnement  est  un  facceur  important  dans  le  calcul  des  taux  de  panne  li ' un 
equipement  electronique  ou  mecanique,  et  la  fiabilite  resultante  sera  d'aut.int  meilK-ure  que  la  tempe¬ 
rature  sera  moderoe. 

Le  pilotage  par  logiciel  bord  permet  d'exploitor  au  maximum  les  svstC'mes  artifs  lie  controle  de  tempera¬ 
ture  surtout  lorsquc  1  '  intel  1  igence  de  bord  a  la  faculte  de  prevoir  I'evolution  di:  hilan  des  <’'cha!ige>' 
thermiques.  I.'amplitude  des  regimes  transitoires  et  les  erreurs  de  trainage  sent  ainsi  tres  nettement 
reduites,  el  en  consequence,  le  "stress  thermique"  des  equipements  bord  I'est  dgalement. 

II  faut  noter  que  la  prevision  de  1 'evolution  des  temperatures  necessite  : 

-  L'n  modele  dynamique  simplitie  des  interactions  radiatives  entre  le  satellite  et  I'ensemble  espace- 
soleil-terre. 

-  Un  modele  dynamique  des  echanges  calorifiques  internes.  La  precision  de  prediction  a  quclques  heures  de 
I'ordre  de  +  5'"C  devrait  suffire  pour  maintenir  les  temperatures  dans  les  plages  spdeifiees  a  + 

Si  I'on  admet  une  periode  de  rodage  en  debut  de  mission,  la  valeur  exacte  des  coetficients  de  couplage 
peut  etre  recalee  par  le  sol  en  fonction  des  resultats  des  premieres  orbites.  II  est  possible  aussi  lie 
prendre  en  compte  la  degradation  au  cours  du  temps  des  revetements  thermiques  par  une  remise  a  joir 
periodique  d’un  jeu  de  constantes. 

-  La  correlation  entre  le  plan  d'operation  stocke  a  bord  et  la  variation  afferente  des  dissipat  im'.s 
thermiques,  en  particulier  les  periodes  d ‘utilisation  de  la  charge  utile  et  des  operations  de  charge- 
decharge  de  la  batterie  doivent  etre  predites. 

Certains  equipements  peuvent  necessiter  une  regulation  thermique  fine,  realisec  par  une  boucle  de 
controle  specif ique,  distincte  du  systeme  general. 

La  precision  d'une  boucle  thermique  par  logiciel  depend  essentiellement  du  nombre  de  captevjrs/actuateurs 
ct  de  la  frequence  de  repetition.  Les  techniques  logirielles  impliquees  sent  done  surtout  de  nature  base 
de  donnees. 

12,4.2,3  -  Sous-systeme  controle  d’attitude  et  d*orbite 

Ce  sous-systeme  utilise  traditionnellement  un  niveau  eleve  d *  Intel ligence  embarquee  pour  assurer  la 
majeure  partie  de  ses  fonctions.  L ' accroissement  de  la  duree  de  vie  de  ce  sous-systeme  passe  essenticl- 
lement  par  : 

-  une  gestion  parcimonieuse  des  ergols, 

-  le  report  de  la  mise  hors  service  definitive  des  capteurs  d'attitude  qui  sent  sujets  au  vieill issement , 

-  une  mellleure  adaptation  des  lois  de  controle  a  1 'evolution  des  performances  des  couples  parasites. 

Dans  les  satellites  modernes,  les  ergoXs  consommables  ne  sont  utilises  que  dans  les  modes  transitoires 
( Hesaturat ion  des  roues,  c ircul ari sat  ion  d'orbite,  etc...),  le  mode  normal  employant  generalement  des 
energies  rcnouvel abl es  comme  le  moment  cinetique  ou  la  pression  solaire. 

Le  role  de  1 ' intel 1 i gence  de  bord  est  alors  : 


-  d’eviter  l.i  manoeuvre,  quand  e’est  possible.  C*est  le  cas  si  1 ' ut il isat i on  de  1  ' inte 1 1 igence  de  bord 
permet  de  limiter  les  consequences  d'une  panne,  en  particulier  d'eviter  le  passage  direct  en  mode 
‘urvie  qui  generalement  est  fortement  consommateur  d'ergols, 

-  He  retarder  la  manoeuvre  au  moven  d'une  prediction  de  la  valeur  et  du  sens  des  couples  pcrturlviteurs  et 
en  ne  corrigeant  que  les  derives  a  moven  terme.  Ceci  necessito  quo,  de  par  la  conception  du  svsteme, 
I'amplitude  des  perturbations  periodiqttes  n’induise  pas  d'e^reurs  proh  j  hi  t  i  ves , 

-  d'f’ptimiser  le  rendement  de  cliaque  impulsion  en  conlrolant  fincment  sa  <hir''e  et  sa  date  d '  app  I  i  (  at  i  I'n . 

I  '  i n format  ion  d“livroe  par  les  detectcurs  d'attitude  est  generalemont  hriiitoe,  d’autant  plus  quo  K 
drteeteur  vieillit  (bruit  thermique  croissant  des  detocteurs  infra-rouges,  bruit  tic  rouloments  des  y.viv's 
etc...).  1.  '  ut  1  M  sat  ion  de  svst-me  de  filtrage  a  m  i  c  ro-proressen  rs  permet  ile  roiiuire  l.i  b.indi'  de 
bruit  et  de  prolonger  la  duree  He  vie  effeetive  des  dftecreurs.  Lt?s  filtres  num<rifpies  (Kalm.in,  p.ir 
exemplei  permettent  de  ponderer  d  i  f  t  eremrf*nt  et  de  mani*re  als*‘-e,  chaquo  tvpe  de  (btecteur  ti'une  cliiTru- 
de  controle,  ce  qui  permet  des  rdoq\i  i  1  itirages  er  *^in  fie  vie.  <'erte  rndtlnnie  n*'(es-;ito  tii  tenii  a  itnr  les 


carac  t  f  r  X  St  iques  de  L-haqiie  '’qaipement,  doiu'  d  utilist*r  U*s  t  hti  i 


It' 


Les  methodes  de  controls  adaptaCit  permettant  d  '  opt  itr.isor  eii  toT’-ps  r.f!  If  ,  .1  r  i.  t  i  .  t  :  ;  i : . 
de  controle.  Files  nocessitent  I  '  »•  t  ab  1  i  ssesnont  de  r.od«le.s  do;,  ifiip!,--.  p*- r  r  ;  j  *•  <  t  f ;  r  i  f  I*  ;  't 
t  onct  ionnement  est  fixe  de  maiiiore  a  minimlser  I’errt'ur  linait*. 

1  d  .  -4  .  J  .  4  -  Snus-s ys  L  » me  ^estli''n  de^  doixui-e^ 

La  taclie  clas'^ique  de  ee  '.aus- sv^- 1  eme  e^^r  il'assurer  la  kji- t  i .  ai  de  .  •  <  L  e-ee  '  --if!  .  !•.  i  i’ 

satellite  er  .  e  eentre  de  eantraU*  au  si>l,  v-ehii-i.i  pavi’.  -aa  xwi  v!.  Ueuev  'la.  piM.,  a  t  *.  1  .  .  W 
^'ontrole  d«.*.s  '  q..  r  at  i  OHS  .  IHi  taif  de  sen  ri'le  d  ‘  i  nt  e  r  t  aot* ,  It*  m.-.- ■>  t  • '?:e  .'f-ti'-'  oe-  i’  .  t  lahi 

Ceeture  en  ‘eneti-'n  dn*  !  i  nature  de--  '-.•Mjs-svst*  n>es  partena  i  le--  et  d'*  •.  e  1  uv.-.e  d.e'-.  l n.e--  !e  ^e-^  1.  s,  ‘pvi  e -- 1 
de\,-olu  au  se^:rent  herd. 

1  '  i  nt  e  1  j  1  k>ei  .  e  d  e  '  r  i  ;eM  r  e  r  r  e  -.1  f  :  e  pi'u  r  ire  1  i .  .j'e  t  !  .t  ■  1  an  1  !  i  t  ■  de  -  r  a  i  ‘e  ;'''.'.-:ita;:e 

-  e  !  *  e  I  r  ;e  I  1  i  •  r:' .  !  1 ,  '  1 1  1  " -  t  i  , •  t  J  .  1  1 1  en  lOi  f  le-’  t  -  I  <  0  ijule^  , 

-  u  ;u‘  r  t  ?  e  ■  •  ;  1 1  r- 1  ■  1  I  ■  .  ■  "--e  -u  •  e  . 

^i.e  pe';'  e.--;  e':--  ;^■e  p  -o  t  j  ”•  1  s  •  I*en:pl-'i  des  r  i‘ s  s. 'u  f .  e j  ^  t  .1  ii  t  e .  I’'aurre'.  f  Tielies  peuvent 

e7e  f  •  r  .  :>>;  ■  wi  {•  I  u pr-’ifies  df  la  ,:esti.Mi  i^,!e‘'a]e  dn  sv'^t'-r.e  Lord.  foirT’.i  nel- 


‘  •  •  •*  ‘  <  '•  I  V- s  a  i  re p.air  carantif  la  liabilit*'  et  la  d  i  spim  i  h  i  1  i  1 1*  du 

'  •  .  •  .  ,  .  •  .  •  •  r  t  ’  nnu-  - 

•  ^  .  ,e:".e?r  lot  dt'  dtte-  ter  line  interruption  du  '^ervitc, 

.  ‘  •  ie  •  r*  !e  -  ii.jtie  j  p.'uvoir  It'ealisor  et  air.onsorire  la  panne, 

•  •  '  •■.-•'ret  .V  t  ;  e  I  ers.t  re  , 

a-  ■  .  •  •  ••  •  ,  ;  I",  t  e , 

■e  ••  t  I'  ;-te  I  per»’ettre  an  s-'l  de  la  rorri^ter  comp  1  e  t  emen  t  . 

e  •  •  •  •  •  •  :  '  t  I  dj'  iser  le  serviie  t*n  plusieurs  tonctions  taiblon’oru  couplies  entre 

e  ,  e  -  •  ‘  .  I  r  1  ’  r  •  r  .•  ’o  sa  t  e  !  1  1 1  e  de  m.ui  I  ere  1  limiter  la  propa^at  1  on  des  p.tnnes  entre  ccs 

1  '-t,  r.  f  ,-.1  ,  ‘  It  et  re  .tudtee  a  nne  f’onctlon  independante  de  celle  a  tester.  La 

;  r;  .'.1  '•  te.r  q-  nr.-,  tie;:  s  p  tone  est  de  I’ordre  de  la  moitie  de  la  duree  maximum  d  *  ind  i  spon  i- 

:  !  :  r  f  >  r  r  •  :■  o  r  et  f  e  :  '  f  1  o'  *  t  vp  i  queinent  que  1  qties  secondes  ) , 

!  '  I  f  :  •  f  r  e.  r  ;  •  f  \  f.r  i:  •  )•  i  us  simple  \  iden  t  i  t  i  cr  que  la  1  i  st  e  en  os  t  plus  redu  i  t  e .  Ccc  i  suvdv  t'e 

d'  -r^aniser  le  •-.-i  re  U'  d-  .  j  -  i  •  n  eii  'lofrent,.  plus  fins,  ^-uUrolatit  un  nombre  redult  do  fonctions. 

le  pr  M'esst'iir  d.e  r-  i  ru  t  i  1 i  “-at  v  on  vi’utu'  tonctiiin  defaiJlante  necessite  rertaines  precautions  si  son  etai 
depend  des  •fats  n-t-rieurs,  ( emme  c’est  le  cas  pour  des  ca  I  cu 1 atcti  rs  de  sous-systemes .  II  Taut  alors 
restitner  t  cette  tn\  eontexte,  ’ui  conferant  'in  I’tat  homogene  et  compatible  a\’ec  celui  de  tons 

les  autres  sous- s v s r imes . 

Ter  1  Imp  1  lipie  : 

-  la  sauve,iardc  des  proj^rammes  par  duplication  dans  une  momoire  de  secours,  a  priori  non  volatile, 

-  la  sauve^arde  perlodlque  dn  contexte,  impliquant  la  definition  des  points  de  reprise  compatible  avec  le 
systeme  general . 

La  periode  entre  deux  points  de  reprise  depend  de  1  '  app  I  Icat  i<'n  ennsiderco  ir.ais  pourrait  etro  de  I'ordro 
d'une  dlzalne  de  secondes. 

Apres  une  reconfiguration  reussie,  le  systeme  est  generalement  pret  a  traitor  aut omat iquement  route  autre 
panne  survenant  dans  I’un  quelconque  des  sous-systemes  a  I ‘exception  do  colui  vonant  d’etre  reconfigure, 
car  11  n'est  pas  certain  qu'une  conf Igurat i on  complete  de  secours  puisse  otre  ditermirn'o  a  honi  faci- 
lement . 

Cependant,  pour  un  grand  nombre  de  missions,  on  pent  consid«'rer  comrne  in'gligeablo  la  pr<’habilit«  d'avoiv, 
dans  le  meme  sous-systome ,  deux  pannes  successlves,  c'ost-a-dirc  stpar»’‘es  par  un  drlai  tol  quo  Ic  sol  n’a 
pas  eu  le  temps  d’analyser  la  preml»'‘re  panne  et  do  modifier  les  conslgnes  de  cm!  i  yni  rat  2  (M1  . 


4  -  Const  qufnces  sur  I  organisation  du  systome  hord 

1  '  i  nt  roduc  t  ion  d  '  int  e  1 1  igence  a  hord  pour  optimiser  le  fonc  t  ionnement  de  ctiaque  oKmont  ot  gt  rer  U* 
svstome  complet,  conduit  a  identifier  des  taches  noiivelles,  a  repartir  entre  le  segment  si^l,  lo  svstime 
bord  et  les  sous-svstomes  bord. 

I.e  systome  bord  r«‘groupe  les  taches  communes  a  plusieiirs  sous-systemes  et  qul  sont  doKguees  a  bord  par 
le  sol.  II  existe  toutetois  un  scuil  au-dela  duqiiel  I'excos  de  delegation  augmente  la  complexite  du 
systeme  bord  et  annule  les  avantages  apportes  par  1 ’ ii.telligence  embarquee  du  point  de  vue  duree  de  vie. 
Ce  seuil  depend  de  la  mission  et  du  type  de  tache  consideree.  Par  exemplc,  I'estimation  de  la  position 
orbitale  peut  mettre  en  oeuvre  un  systeme  de  senseurs  sophistiques  ou  bien  se  limiter  a  un  simple  modele 
temporel  des  eclipses  et  de  la  rotation  du  soleil  (suffisant  pour  les  besoins  des  sous-systemes  thermi- 
ques  et  generation  de  puissance). 

Les  sous-systomes  de  hord  travailient  a  partir  des  directives  du  systeme  bord,  qui  fournit  aussi  les 
donnees  et  les  ressources  communes,  et  optimise  leur  travail  en  fonecion  de  criteres  qui  leur  sont 
propres.  Chaque  sous-systbme  ou  sous-enscmble  comporte  une  entite  de  gestion  qui  regie  les  problemes 
locaux  et  ne  soumet  au  systeme  bord  que  ceux  qui  sont  insolubles  au  niveau  sous-systeme , 

Les  contraintes  de  conception,  tel les  qu'elles  resultent  des  analyses  ci-dessus,  sont  les  sulvantes  : 

-  Le  nomhre  d'elements  en  redondance  est  eleve,  les  cross-strapping  sont  nombreux  et  les  redondances 
triples  ou  quadruples  ne  sont  pas  raros.  De  plus,  ccs  redondances  doivent  pouvoir  etre  gerees  par  des 
calculateurs  de  bord. 

Kn  consequence,  il  est  primordial  de  definir  des  moyens  et  regies  de  gestion  systemat iques  des  redon- 
danccs  tant  au  niveau  du  materiel  (interfaces  de  donnees,  d*alimentation,  etc.,,)  que  du  logiciel  de 
maintenance  (signalisation  des  pannes,  procedure  de  sauvegarde  et  restitution  des  contextes,  base  de 
donnees,  mise  a  lour  perrr.mente  de  la  configuration).  L*etab1  Issement  d'exigenccs  de  tesr.ibilitc  peut 
facllitor  la  I  oca  I  isnr I  on  des  pannes, 

-  L’ ut 11 isation  extensive  du  logiciel  n*est  ef f ect i vemeiit  benofique  pour  la  duree  de  vie  que  si  le  taux 
de  dvfaillance  est  tres  bas.  Cecl  impose  des  methodes  rigoureuses  de  production  de  logiciel,  la  reuti¬ 
lisation  de  produits  deja  valides  et  la  limitation  de  la  tailie  dc  chaque  logiciel  quitte  a  fractionner 
un  logiciel  juge  trop  volumlneux  et  d if f  ic i lement  controlable.  Malgre  res  precautions,  une  erreur  de 
conception  peut  se  reveler  apres  Ic  lancement.  La  reprogrammat ion  eii  vol  devient  une  exigence  fonda- 


-  ll  faut  distinguer  deux  types  d ’ inte 1 1 i gence  de  bord  ;  la  premiere  est  specialisee,  comme  par  exemple 
un  compresseur  de  donnees  ou  un  filtre  numerique  ;  la  seconde  est  chargee  de  la  gestion  des  interfaces 
des  modes  de  fonctionnement  et  des  redondances,  Ces  deux  compt'santes  sont  genera  1  onient  associees  mals 
la  premiere  se  rencontre  surtouC  au  niveau  equipement  ou  sous-syst erne ,  alors  que  la  seconde  releve  plus 
du  systeme  en  general. 

-  Le  systeme  doit  etre  architecture  de  manif-re  a  regrotiper  on  <?ous-onsembl  es  les  fonrtions  qui  sont 
fortement  couplees,  limltnnt  ainsi  la  complexite  des  interfaces.  Au  sein  de  chaque  sous-cnsemble,  un 
logiciel  de  gestion  est  charge  de  lesoudre  les  problemes  locaux  de  redondance  et  limite  ainsi  la 
propagation  des  pannes  vers  I’exterieur. 

-  L’emploi  de  redondances  doit  etre  limite  au  strict  necessaire,  'i  la  fois  parre  qu'elles  sont  genera- 
lement  difflciles  a  realiscr,  et  parcc  qtTelles  requierent  du  materiel  suppl ementairo. 

-  Le  satellite  doit  etre  eqnipe  d'un  systeme  de  prediction  des  evenements  futurs,  composA  essent iel 1 ement 
de  2  fonctinns  dlstinctcs  : 

.  une  prediction  de  la  position  orbitale  (pour  les  applications  do  gestion  dc  I'energio  et  du  controlo 
thermique  une  precision  medeste  suflit), 

.  la  memorisation  et  I'oxecution  (i'un  plan  d  *  (*perat  ions  dftaill*^-,  mis  a  jour  et  '('n.plete  pi  r  i  (v!  i  qnoneii  i 
par  le  sol.  f'e  plan  doit  etre  duplique  a  bc^rd  ptair  eviter  de  !c  perdre  a  1  ' 'Uias  i  (-'ll  d’une  panne. 

lai  response  a  rette  1  iste  de  contraintes,  1  '  archi  tccturo  proposec  figure  vise  ■>  tariliter  !a  pe^-tii'n  de‘; 
redondances  et  1 ' Impl antat ion  de  logiciel  a  bord. 
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Figure  2  :  ARCHITECTURE  GRNERALK  DU  SYSTEME  BORD 


Les  equlpemenCs  sont  cegroupes  par  sous-ensembles  auxquels  est  affr<  te  un  calculateur  coinmun  charge  des 
taches  fonctlonnelles  proprement  dices  ec  de  la  gescion  des  equlpements»  Ces  sous-ensembles  sont  relies 
entre  eux  par  le  bus  de  donnee  plaCe-forme  et  sont  geres  par  un  controleur  central.  Celui-ci  est  en  plus 
charge  des  relations  avec  le  sol. 

Un  sous-systeme  peut  regrouper  piusieurs  sous-ensembles  communiquant  a  travers  le  bus  de  donnde  plate- 
forme.  Les  equipements  sont  relies  a  leur  calculateur  local  au  moyen  d‘un  bus  de  second  niveau  dont  la 
conception  inclut  non  seulement  I'echange  de  donnees  mals  aussi  le  controle  des  mlses  sous  tension  et  des 
disposltlfs  de  test,  Sa  conception  est  egalement  fortement  orlentoe  vers  le  temps  reel  et  le  support  a 
des  boucles  de  controle  rapides.  La  figure  i  donne  1  *  organisation  interne  typique  d*un  sous-ensemble . 


Bus*de  donnr'fs  sorit  rrdond.int 


Coi.'-.cndos  de  mise  sous  tension  S/K 


fa  1  (  t:  1  a  f  l  ur 

(if 

- •  iisrr'ih  1  e 


Convt  r i ; ■  |  - 

s*  ur  ci«  • 

p«ii  •.?  .'jm  ♦  I 


Pu  i  ssavu  v  pr  i  ma  i  r  e 


fi n  ndf- do  rris*'  <;nus 
I  .  0  i  (’P  f  on*  t  i  on  _  ..  . 


1 

IT  l*:!!;-  I  i  on 

I 


Hus  di  ill  Tinfrs  I 

do  .scM.ntl  nivinu  JL 


.  Pt  t  I (Ml 
2 


I  i  f  m  s  d  '  Al  in  «  n t  at  i  or. 
'>f(  i‘nd a  i  re 


Figure  3  :  ARCH riKCTURK  TYPIQUK  D'UN  SOUS-ENSFMBLK 


Du  point  tic  vuc  tD“  gestion  des  pannes  et  <iu  oontrt'*!e  des  modes  d 'opcrat  ion ,  1  o  svsttn^o  i  o  r  t  o'::-:-:!  i 

h  i  f  rarch  I  sf .  i.e  v'aloulateur  local,  qui  gore  Ics  redt^ndances  de  ses  propres  pt  r  i  plu  r  i  quo^  c^r  ei^.  rt‘d<’o- 
dance  froide,  ec  c'esC  Ic  controleur  central  qui  a  la  taclie  de  rec<>nf  igurer  ct  de  ro  i  n  i  r  i  .1 1  i  ser  Il-> 
calculaCturs  locaux  en  reutil  isant  les  programmes  dupliques  et  les  contextes  sauvegardes  dans  la  rM  nioire 
de  masse.  Par  cootre,  le  controleur  central  est  en  redondance  active.  L’n  dispositi!  simple,  no!i  redt  nd<  . 
detecte  la  panne  du  calculateur  en  service  et  en  active  un  autre,  prealablement  selettic’nne  par  le  -ol. 
Ce  senema  suffit  a  assurer  une  d  ispon  ihi  1  i  t  e  et  une  tiabilite  sat  isf  aisantes  a  condition  que  le.s  pannes 
retard  du  dispositit  de  redondance  soient  minimisees  et  que  la  majeure  partie  de  la  iremoire  de  masse  soit 
i  I.  CO  pend  ant  e  du  caicu  lateur  central. 

L '  ut  i  1  isat  ion  extensive  du  logiciel  doit  etre  supportee  par  des  methodes  etticaces  de  validation  t-i  1.^ 
possihilite  de  modifier  en  vol  et  par  partie  n'importe  quel  logiciel  d  ’  app  1  icat  i  on .  (Icrtaines  partie^< 
repetitives  des  logiciols  systeme  ou  sous-syst'^'mes  doivent  etre  standard isees  pour  en  augmenter  la  sureti 
de  f one  t ionnement . 

! J . 4 . 5  -  Conclusion  et  limitations 

L ’ ut i 1 isat ion  d ' intel ligence  embarquee  apparalt  done  comme  un  moyen  interessant  pour  augmenter  la  aurte 
de  vie  des  satellites. 

Tout  d’abord  au  niveau  equipement,  un  plus  grand  nombre  de  fonction?  peuvent  etre  confides  a  des  Ic'gi- 
ciels  en  remplacement  de  composants  mccaniques  ou  de  logiques  pre-cabiees. 

Fnsuite,  au  niveau  sous-systeme ,  1 ' ut i lisat ion  den  divers  cquipements  peut  etre  coordonnde  de  manure 

plus  fine,  en  n'utilisant  chaque  fonctior  que  lorsque  necessaire  et  en  la  plagant  en  rept's  le  reste  du 
temps.  De  meme,  1 ' intel ligence  embarquee  permet  une  meilleure  gestion  des  elements  consommables.  Ilnfin, 
au  niveau  systeme,  la  capacied  de  prevoir  I’ovolution  de  1 'environnement  et  du  plan  d'opcration  permet 
d’harmoniser  au  mieux  la  gestion  des  consommables  et  de  controler  dans  une  certaine  mesurc  les  conditions 
d ' envl ronnements  (chermique  essent ie 1 lement ) .  L * inte 1 1 igence  embarquee  offre  en  outre  la  possihilite  de 
reconfigurer  automatiquement  en  vol  des  equipements  defaillants,  sans  pour  autant  alourdir  sensiblement 
satellite. 

Neantnoins,  ces  avantages  sont  contre-balances  par  2  sortes  de  limitations  : 

-  la  flabilite  intrinseque  des  calculatcurs  de  bord,  principalement  en  ce  qui  concerne  les  technologies 
sensibles  a  1 ‘ environnement  spatial  et  les  memoires  semi-conducteurs , 

-  le  cout  des  systemes  inf ormat iques  emharques,  qui  est  essentiel lement  non  recurrent  et  concerne  surtout 
les  logiclels  d'interface  et  de  gestion.  La  definition  de  ces  logiciels  devrait  etre  scandardisde  de 
maniere  a  mieux  rcpartir  1  '  Invest  issement .  I’n  optimum  reste  a  trouver  entre  le  niveau  d'efforf  c.e 
validation  au  snl,  la  capacite  de  reprogrammat ion  en  vol  et  la  d i spon i hi  1 i t c  attendue. 

12.5  -  KNTRETIEN  LN  ()RBITF 

l.’entretien  de  satellites  en  orbite  est  une  soluti«ni  attractive*  pour  assurer  le  fonctionnement  de  satel¬ 
lites  ou  p  1  ates-f ormes  prevues  pour  dc  Dengues  i'u  cr»’s  longues  durees  dc  vie  ;  cela  semhle  une  solution 
assez  souple  puisqu'il  suffit,  t‘n  cas  de  besoin  ou  svstem.it  iquement ,  d’envoyer  un  vt'hicule  de  dopann  tge 
pour  remettre  a  niveau  le  s.itel 1 ite .  In  fait,  e'est  une  solution  tcchniquement  difficile  puisqu'elle  laic 
appel  a  des  techniques  nouvellcs  cc'rr.me  la  rohotique,  le  rondez-vous  et  1  ’  assembl  age ,  le  vt'hicule  spoci- 
;'icjue  d'entretien  et  qu'clle  a  des  imparts  impc’rtants  sur  la  conception  du  satellite  lui-meme. 

I  c .  5  .  I  -  Interet  de  I’entretien  en  »*rhite 

I.'interet  de  I'entretien  en  orbite  des  satellites  est  multiple  car,  loin  de  se  limiter  a  la  r'paration  «  n 

a  la  prevention  de  pannes,  cette  solution  pent  »'ga!ei'ent  influencer  la  stratogie  d '  ut  i  !  i  sat  i  on  dt  ^ 

satellites,  Ainsi,  outre  I’entretien  svst  •  mat  i<jue  et  la  ro]iar.it  it*n  ,  1  ’  u  t  i  1  i  sa  1 1  on  d'an  v«huulo  d'entro- 

tien  pent  pernettre  de  ravitailler  le  satellite  en  i-rjnils,  de  rbparer  ou  >  (hanger  tout  'ii  partie  do  •  1 
charge  utile,  voire  de  p.i  r  t  i  c  i  p«-‘ r  .■  certains  tests  de  Inui  l  one  t  ii^nnert  a  t  .  CefCe  sf'lution  >  icuit  ain 

la  reduction  de  pliisieiirs  des  c.iusls  de  Mnnt.ati(>n  de  la  dur*  de  vie. 


MO 


!  S  .  1  ,  1  -  kav  1  ta  i  1  lemei)  t  cn  er^ols 

La  masse  it'ergols  embarquee  au  lancemont  penH  de  la  dur*  i-  ili-  !  .i  *'r  •ait.  •,  ,it  ,-i 

du  satellite.  Rec  i  proquemeii  t ,  la  durbc  dt-  vie  espir-.*.  .itellirv  .-a  t.mi  ti  :  u  i  •  t—i  ’-rivi- 

elle-meme  limitve  par  ies  capacitos  du  lanceur.  Aii'si,  .  e-  rv.  wv  .  '  i  *1'  ■-  !.i  ■["  :  .ri  mi- 

nelle  d'un  certain  nombre  de  satellites  a  vti-  due  .*  1  '  •  pn  i -i-- .-■  !  v--  t  i  v-.",;  ^  .  ;1 

esc  done  interessant  d'avoir  la  possibilite  d'atr.e'ief  .!»•'  t  r  a:  :ti  '■-t.-,  :  ;i'  ;  vr  ;r'-> 

1 '  ut  il  isat  ion  de  la  plate-ti'rme  quo  peur  remvdiei  :  u-'  •  ;-i:  r  ■  .fi,'  ’’  :•  a- pr-  '.-Mt.-. 

consommatrices  d'ergols.  Dans  le  cas  de  sate‘;ite-.  i«  •  .■!«-  *  r 

egal ement  possible  d  '  adapt er  1  e  c  onrept  et  i  *  :  a t  •  .  : .  ■  ’  t  ;  .  '  '  ■  ■  •  ■  :  r  .  '  '  !  e i  t 

systematique  au  bout  d'un  certain  te;::ps  •.  ■  '-i!  •  .  >  ;  ■  .  . 

pourrait  etre  dimensionne  p<ir  urn-  parrie  (!.i  r.  ;  t  ;  ■  *  i  i 

mission  complete,  ce  qui  represente  un  gain  .it-  ;■  i  .  •  .  i  •  •  ■  . 

En  c on t  re-part  ie ,  ravi  tn  i  1  1  er  un  sat  e  1  1  1 1  e  e*'  ■  r  ‘  ^  .  -  a  :  •  :  •  •  r  .  .  i  •  ■  . 

des  operations  correspondantes  :  entre  autre*^,  1 1-  r  •  ;  . 

systeme  de  propulsion  adapte  soit  a  un  r,  i.p  1  i p  .  .  •  .  ,  .  ^ 

soit  a  I'adjonction  et  a  1  '  ut  i  1  i  sa  C  ion  d’un  r* ‘»er-.  •'  .* 

Parmi  les  differencs  modes  de  ravi  tai  Memeiu  eru-;.  •  •  '  -i  -.it  -i  t  'e- 

ergol  s  depuis  le  vehicul  e  d  *  ent  ret  ien  Misqu '  .n;  •  :  •  :  ■<  -  •  <  .  '  ■  ■  i  '  i-  n  «• 

solution  suppose  un  concept  ad  ap  t  o  du  s  vs  t «  r;e  de  nr  pu  1  •  ;  •  ;  .  •  *  •  ' .  .•  f  •  ■  ■  .  ;  r  ;  ;  ’  ;  •  r  s  t  i  n  •  e  t 

d  '  equipements  (pompe  ,  sur-pressur  i  sat  i  on  )  sp*  i  i !  i  ■piv"  u  r  a  »  r  r  -  * .  ?  '  :«■  ■  t-  n  t  m  ■  :  n  r  : ,  ai 

consiste  a  ajouter  des  reservoirs  au  satellite  ftikiure  •  ■>  m.  i  ;--ei.  ii  qui 

ev  '  1*  le  probleme  de  remp  I  i  s^'age  ;  mais  I’adtMti.-:'  d«-  r  •  r  v.  •  i  r  .j-vt-firi  ;ues  n-,.  ^  :  t;i,es 

di  satellite  ct  le  remp]  acement  de  reservoirs  ..■■nduit  *  uiu-  ■  p*  ?  •  t  i  ’un  .'np!.*!  !  '  i.  t  m- r  . 
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Figure  A  :  MODES  POSSIBLES  l)K  KAVITAILLF.MKNT  EN  RHC.OLS 


12.‘>.1,R  -  Entretien  et  reparation 


L’entretlen  systematique  du  satellite  en  orbite  consiste  a  eduinger  les  equipements  estimes  critiques, 
c*est-a-dire  ceux  dont  la  duree  de  vie  est  limitative  ou  inferieure  a  la  duroo  de  vie  spi'ciiive  du 
systeme,  Cette  possibilite  influence  conslderablcment  la  philosophic  de  conception  du  satellite  puisqu'nn 
pourrait  dissocier  la  duree  de  vie  des  elements  critiques  de  cel le  du  satellite  lui-meme.  Ces  elements 
critiques  pourraient  etre  dimenslonn^s  non  plus  pour  la  duree  de  vie  ilu  svst-^re  complct,  mais  pcuir  la 
periode  s'ecoulant  entre  le  tir  du  satellite  et  la  visite  du  vehicule  d'entretien  ou  entre  deux  visites 
successtves  du  vehicule  d'entretien.  Cette  perlode  pourrait  etre  optimlsee  en  fonction  du  clioix  des 
technologies  des  elements  critiques  et  rec Iproquement . 


Dans  ces  conditions,  la  conception  du  satellite  vis-a-vis  do  sa  duree  de  vie  spreifiee  prendra  en 
compte 


-  la  fiahilite  des  equipements  a  echangcr  pour  la  diir»*e  dVine  pvriodv  <1  ‘  ent  ret  i  en ,  ce  qui  conchiit  a  des 
exigences  molns  sevores  sur  ces  equipements,  a  des  assoupl Issemcnts  do  Imirs  conditions  d  '  u t i I i sa t ion 
et  a  un  gain  de  masse, 


la  fiablllte  des  autres  equipements  sur  toute  la  duree  de  vie  du  satellite. 


Panr^i  les  oquipemencs  <|ui  pi'urr.i  b«  lu-i  ic  Ut  i*.  nn  to!  onticlien  v-.  t  ■  r,i  t  i ‘.ti.  ■ .  -i.  ;t’ii  .  ii.  r 

-  Les  batteries  :  los  hatterie-^  NiC'd  ea  orbite  basse  iMit  line  diiroo  lit-  •.•io  ik’  quo !  ami- f  .  :  u :  i  "t 

leurs  conditii'ns  ri  *  ut  i  1  isa  t  i  on  (cjui  dopcndent  du  nombre  de  battt'rio'^  on  r-qui  os  )  .  !.o<  '-.itti-rios 
semblent  avoir  une  clurde  de  vie  plus  lonj^ie,  mais  toutos  deux  pourraituu  ol  ri-  o  r  i  t  i  <iiu‘-  vis-a-’.  i-,  I'lm,. 
duree  de  vie  de  10  a  15  ans  en  orbite  basse.  Le  remplacemcnt  des  batteries  .m  biuir  .lo  -jm;' !  ciue?-  a:a'.\  -. 
serait  une  solution  attractive  et  inf  lueucerait  le  choix  du  type  des  batterie.-,  et  sos  Lauid  i  t  i  lUis 
d ' ut i 1 isat ion . 

-  !.es  boTtiers  e lec t ron iques  . 

-  Les  paquets  de  gyroscopes  dont  la  fiahilitd  se  d»“grade  en  fonction  du  temps,  er.  pa  r  t  i  cii !  i  e  r  a  cause  de 
I'usure  des  paliers  pour  certains  types  de  gyros. 

-  Les  revetements  thermiques  passits  qui  pourraient  ecre  aqoutes  dans  le  cas  de  degradation  trop  inpor- 
tante  des  caracterist  iques  thermo-opt  iques  dcs  revetements  multicouches  initiaux,  on  rem])iace.s  (o.is  des 
radiateurs)  lorsqu'ils  sont  months  .!  irectement  s\ir  un  equipement  Uii-meme  a  remplacer, 

-  Les  elements  mecaniques  tels  pompes,  .ictuateurs. . . 

-  Les  panneaux  solaircs  dont  le  remplacement  pourrait  etre  envisage  siiivant  le  cas  de  mission,  par 
example  si  les  degradations  subies  au  cours  do  la  vie  sont  trop  import. intes  (re  qui  tiepend  des  c.irac- 
teristiques  orbitales),  ou  si  I’echange  ou  I’addicion  d’unc  charge  urile  entrnine  un  accr«M sf.ement 
Important  de  la  demande  en  cuergie.  Un  Cel  echange  aurait  essont iel lement  un  impact  sur  le  volume  sous 
coitfe,  la  masse  au  lancement  et  les  caracteristiques  physiques  du  satellite  en  orbite. 

Outre  I'entreClen  systomatlque,  la  reparation  d  ’  equipements  d«' I'a  i  1 1  .ant  s  pourrait  s’effectuer  en  orbite, 
dans  la  mesure  toutetois  ou  la  panne  pent  etre  detectee  et  local isec  et  ou  I 'equipement  a  eti'  Ciuigu  pour 
etre  echange. 

Parmi  les  approches  envisageables  pour  I’entrecien  en  t'rbitc  des  s.iti*!  1  i  tes,  I'unc  c<'nsiste  a  iciianger 
l*equipement  en  cause,  ce  qui  suppose  qu’\\  ne  participe  pas  au  t onct ionnemont  du  satellite  pend.int  au 
moins  toute  la  duree  de  1 ' operat ion . 

Une  autre  approche  consiste  a  aiouter  un  nouvel  equipement,  ce  qui  suppose  (;uo  le  sati'lliie  soit  c.'jpable 
de  prendre  en  compte  un  element  additionnel,  tant  au  point  de  \nu*  al  imontat  io!i  t‘t  d  i  sr  r  i  Ini  c  i  on  de  d-Mnne--; 
qu'au  point  de  vue  caracteristiques  pnvsiques. 

12.5.1.3  -  Moditicatlon  de  la  charge  utile 

II  pourrait  etre  intdressant  d'utiliser  le  vehicule  d '  en  t  ret  i  «'n  p«nir  ecb.an.qr  toute  -ni  p,»rtie  de  la 
charge  utile,  soit  parce  qu'il  v  a  d«  f  a  i  1  1  .ance ,  soit  pt  ur'  modit'i«*r  -m  ch.uiget  i  a  rissior^  t  ut  eii  e-'n'-ir- 
vant  la  memo  p  1  a  t  «:■-!■' rme .  ''ela  permt:'r,  er.tre  autre,  de  roTr-alier  t  I  '  ob-<' le^cence  qui  e-t  gale'ae-'t  I'tiriC 
lies  causes  pO'.sihle-  il<-  ii'nit.ition  de  la  dur«e  de  vie  dos  satellito-^.  (efte  icod  i  t  i  -  a  t  i  on  vie  la  .Imja-e 
utile  ne  pent  ^  ’  e  1  I' ec  t  tie  i  -pie  si  la  p  1  at  e- td>rme  el  la  charge  utile  mt  -t«  ton-.iKv-  dan.'  mtre  •  '  o  n  t  >  i  a  i  i  r - 
et  a  condition  qne  !a  n''tiveile  iharge  utile  •soit  compatil'le  ave.  ’es  re'-sonr  e-;  .aieitv-  j'af  la  pi  ir,- 
forme,  bien  que  celle-rl  pui-.^e  -  vent  ue  1  1  enen  t  etre  reiri.se  i  ni-.:aii  {a-l-iiti'-'  'ie  '•  1 1  t  .•  r  1 ,  p  m'  e'-r:; 
dans  les  limice'^  de  sa  ivncepr  i  on . 

1  1  .  ^  -  1  mp.u- 1  ^  de I  '  eti  t  fe  t  :  en  ar  b  i  t  e 


ry- 


I'lmpant  •!(.  I'entr.'tien  en  I’rbjte  sur  la  duree  de  vie  et  la  fi.d'ilit*  ■  i.  -.ttellitv-  e'-t  re  p  r '  ■  :-en  t  ■ 
fic'ire  Mle  -'’ntre  l'  e-  roissement  <le  ccs  deux  paramc-t  re.'-  cut  -.as  d. '  en  t  ra- 1  i  vn  -eul,  de  r  a  v  i  t  a  i  1  1  e'-.en  ’ 

et  de  -  •  ••’tretien  plus  ra  v  i  t  a  i  1 1  emen  t . 

••■’r  m  il  e  t  e-anri,,’eMy  .!e  oomhiner  routes  les  intervenf  ns ,  e..  e-i  .  ■  n  .  q.  k- .  aj.  planifiei  ’os 

dite-,  i}  ’  i  t  e  r  o  ••  ft;  bimile  d'entrotien  .  cours  de  l-»  vie  du  ■- .P  ’  i  r  e .  f't'la  pi'rmet  il'a\-oir  un 

d  in-.ens  ien-a-'^e-'f  -f-s  r.  ps  d’ergols  cofierent  avec  le  <d..-'ix  des  t  e.  1  an- !  •:  •.:  i  i*--  de-;  -'li'r.enr'^  critiques, 

'eu'^  'taeif  de  ].\  date  pr^vue  p(»Mr  Ic  (on  !c*s)  t*n  i  r  et  i  i-i- ‘  .-r'-ife,  I'c  la  rnTM-ie  t-icon,  il 


■a  t  t  1 ''  f  • 


■  r  .f, 


ne  m‘>d  i  !  i  ea  f  i  on  fie  la  fh 


arv:e  -it  ; 


vf  ; -  r  1 en  . 


f.n  .‘one  rf'p,-}  rr  i  0 ,  1  '  ett  c  reC  ien  en  orbite  lmp<'sc  des  r-'Rlos  de  conception  du  satellite.  Ainsi  : 

-  Toys  les  rqulpetnonts  ne  pourront  pas  beneficier  dc  cet  untretien;  les  cquipements  concerncs  doivent 
etre  implantcs  dans  la  zone  d ' intervene  ion  du  vchicule  d'entretien  (qui  differe  suivant  que  les  vrani- 
pulations  sent  effectuti's  par  un  bras  manipulateur  on  par  I'homme),  etre  d'acces  aise,  et  avoir  dos 
connexions  clectriques,  mccaniq\ies  et/ou  fluides  adcqnatcs  avee  le  reste  de  la  plate-forme. 

-  Ic  satellite  doit  etre  aciessihle  par  nn  vehicnle  d'entretien?  ct  done  offrlr  un  interface  d'accostage 
et  possodcr  les  equipements  de  rcndcz-vous  correspondant s ,  les  differents  sous-systemes  (contri^lc 
ri'attltude,  tbermique,  f'l^ergie,  gestinn  des  donnees.  ...)  doivont  etre  compatibles  avec  les  operati(’'n^ 
d ' e  n  t  r  e  t  ten. 

-  Les  eqnlpcments  sp<cifiques  de  la  mission  d'entretien  (eqnipemonts  de  rendc7.-vous  et  .ULv''staRe  par 
exenple)  doivent  etre  tels  ejue  le  satellite  puisse  toujoiirs  bencficier  de  1  '  i*n  t  ret  ten . 

On  VO  i  t  done  qne,  par  rappiTt  aux  aiitres  solutions  proposecs  pour  angmenter  la  dnn-e  do  v  i  o  des  satol- 

iites,  I’cntretien  en  orbite  a  des  impacts  importants  siir  la  ptiilosc^phip  <lc  conropllpn  et  d  ’  n  t  i  1  i  sa  t  i  or. 

d  u  satellite. 

I  d  .  '5 .  d  -  r,  1  <'men  t  s  d  '  i  n  f  ras  t  rue  t  u  re  assoc  ies 

II  ost  evident  que  I'entretien  on  orbite  de  satellites  ne  po\irra  etre  assvsr*  saii-^  \ine  i  n  ‘  r  asi  riu  t  n  la.' 

prhitale  assot  ive.  I.e  chc'ix  des  noyens  a  mettre  en  oeuvre  p<nir  assurer  ret  entretien  en  orl  itp  <L  pt  nd  dn 

tvpe  (1 '  oprrat  i  envisagtes  et,  on  partictiMer,  de  la  prL-senre  ou  non  dr  ’’homme.  I  li  rttrt,  ij'c  ra- 

tiin^.  d'entretien  en  orbite  peuvent  rt  re  etfectu-'es  do  mari*'re  automatique  par  1  '  i  nt  rrmrd  i  ,>  i  rr  il'iin 
'.'/■b  i  r  M  1  e  d'entretien  pniirvn  d  ‘  •  q»i  i  pement  s  de  roh<'t  i  qee  nt  ressa  i  res  (  bras  n  .in  i  pu  1 .1 1  rn  t  .  can  '  ra  -  .  .  .  .  )  , 

transportant  •  I'  n'cnt-;  de  rerb.inge  <‘t  rontrolr  depui*  Ir  so!  ion  rlrptiis  niu'  '  t.d  i  ai  spat  ia’r)  ;  r 

p'rati  '■  peu'.ent  •gtlrn’enc  pii''  tinier  de  1  '  i  n  t  er^’en  t  i  <  n  bumaine. 


v.‘nr  re  r  1  c-p.  pi>  t  PiT’.i  t  i  niie  iii,k;ure  »■’ »  ,  I.-  •.•■-hier  t,  ..-i  r  •.  •..i-, 

I.i  p  1 -tre-r'erp'.e')  ct  s'y  arrir’er  ;  le  OiKUrele  di-  i  \-r;- i-r:  !- !  e  !.  .  pt  ii:-.  .  i.  i .  !.,  t 

n;rec•^.  pL-:v.iap.t  teute  !  .1  pliase  de  etniplay^e  peip.a-nl  el  r.  i-::e.ie,  '’■ipi  -i  ;',e:;re.  .  i  v. :  11 1  it 

r  a',  i  t .)  1  !  !  t'Tep  C  en  er^els  suppose  1  .t  nise  ep  plav-t-  vi'i  r-  st  i-  •  m  1  ;  i  f  !«•  v.ip.ij'ii- 

.1  li  ee'n'.exien  eutre  le  svsten'o  de  propulsiep  xii:  atelliir  »•{  !'i:.Lt-r!  ipe  i- ^  -  r  n- -- lu  ndai;  t  di: 

I  e--  •.  pi  i  p.epL'iu  s  i  echaneer  tleivt-nt  etre  da!is  la  /lus'  1 1 1 1- i  l:;:.-’- i  e  ;-.:r  1  pii  1  a  L  eu  r  .  I  es 

l-^  de  :-,!P pa  !  at  ii'n  serene  de  pr-.' t  d  reiiee  eoi'.t  re.  1  evs  de  ra!'i«re  -  aiiniit-  par  la.  --tatiep,  sp.  1  ,  ep  qu  i 
;Pe  1  p  :  p  a- 1  r  lit' t  a  r  e  de  eomraui  i  eat  i  ep.  avl«quate.  I.t?  v.  !i  i  e  u  1  f  piuit  etre  lane*  par  laiieeiir  ei''rv  n- 

'‘ir  I  •a'^'ite  du  •  a  1 1‘ !  1  1 1  e  (ti'.iure  •'  h )  ,  par  uii  vaisststu  tvpe  Spat'e  Shuttle'  dcpniis  sou  ori'ite 
depui-  iip.e  '  It  lap.  sp.it  i.ale  en  'rhite  hasse  { n ,  tM  ;  i!  pent  etre  r«' cup-- rah  1  e  an  rapscMirnabie . 


;  *.  e  1  «  ia  t .  [  i,Mi  -.III  1.1  St  .ii  ion  j 

'•  d  -.la :  i  .1 1  f  (ini  i-r  vi-nl  i  un  j 

diii'i.T  i  n»' ) 


K  i  u  i-  e  ^  V  :  st'WKloS  POSS  1  HI  1  S  nMMHlTlKN  FN 

1  d  '  :  I  '  '  r  • ' •  r  i  ■■  ‘  a  :  :u' ,  I  e  .  •  :  r a t  i  I'P •-  1'  *  er'.t  re  t  i  e!'.  pc'U r  r.a  i on  t  so  !  a  i  re  d  i  r or  t  emon  t  a  pa  i  t  i  i 

.'lie  i  ■'  it'  ,  t •  pee  ''liultle'  ! i),  apr-s  .KIM  1  I' .i>;e  a  lino  stativ'ii  sp.aiiale  (f-'/e)  on  aihitc 

a-  .  t-  der'.iep  .  i-,  'U'  '  •  It  i  {•  u !  o  -.p*  .  r  iqtio  <  eiu  tvpe  v-liieule  d’entrotien)  paurrait  otre 

■r  i'lT  der  !e  •  I'-lIite  -'K  ar’'ito,  le  rira-nor  i  la  «'.tation  spatialo  avanl  d'aller  '.<■  '•p  -er  a 

ur  -  ■'  r'Mfe  ur-e  U' \  ^  I'enirotion  t<-TTMn*.  |  es  • -pd  r.i  t  i  an  s  il'ortrotien  ser.iient  .il-'r-^  t' ‘  !  e  e  t  n  ■ 

trie  ,  ^  .  i  r  .  M  re.  r .  -..u  f  ,  .-'it  par  !'  i  n  t  o  rr«  d  i  a  i  re  d  *  nn  ti.-hii  pu  1  a  t  on  r  s  i  t  u*  ^al  r  la  s  ;  -  i  at' .  i  '  i  it  t  e  i  - 

lira,  ta  d-’  ■'  '-I-  p-''"*.i  d’'-rirvir  la  .-atv'  a  t  t  e  i  vinali  1  o  p.-nr  'a-han.ee;  ies  -  \  <■::  •  ititiau.-: 

•1  i  >■  ’  I  1  e  ;  "a  i  s  -Tier.e  a-.ei-  I'assi'^rnuo  do  I'h.rrro,  'pii  ptM'ra’t  praa, (  d  ’  ■  (  h  :  e  e  r  piu' 

eat.  i  1  tint  o'u' '  r i'  nina  1  e  s.’  t  e  1  1  i  t  o  s  -  •  i  t  c  an'.ai  t'<-n  r  un  t  e  i-n I  la  f  1 1  n  .  e  t  in-  :  a  t  i  .  \i  ■  i  •  ;  a 


:  14 

I . o  -  ri s  1  i ^ 

;  .i  dc  viv  d<.'s  salt- 1  :  li'>  i  toadr.^-f  auvira*!’ {  .■  r  dcpuis  inu*  i  >■ .  lit  ;  •••'r'.;,  :  ;  •. 

pro'f^ab oir.oiit  d'uiU'  .  1  i  a  r.i  t  : -ai  a«'n  t  i  iiac  1  ’  a  do  la  r  aoiino  i  i  o  ,  v.t  ao  hcartta  a  ip;  r  •••;'•  ;  ,• 

lo  'aiioour,  'i  1  ’  i  I'.t  o  ro  r  d*-  !.»  'vlasi.*:!  art  r’Uit  d'nitc  duro*.-  i  !.t  t ‘  ■  ^-iv'  ‘la  .  :r 

ro  d  '  oqii  i  por  on  t  s  '•■a-.t  dovoiiii'  kritiauoa  !  iiue  do  ,ou\i’ii‘  ra*!’:;* !  i  r  !«••'  o-.iuaa'.>.'  d’a:.  dar  a-  .  ; 

aoc  ruo  . 

riusiouj''  appraclu's  aoa.t  oiv.  i -^aq.oal' !  o-;  pour  rorodior  a  cos  prohloTr.os  ot  .nr.o  i  i  c.  ta- ;  ain-i  ':.i  sa-c  -lo 

actuollo  dos  s  a  t  v 1  i  r  a  s  .  [\‘r'ri  oiU'-.,  i  '  i:t  i  1  i  sat  i  or.  ^-lo  1  '  i  nt  o  1  ’  i  ooiu’o*  do  i-o-.-d  poi'::«t  d  ' .  ;  •  r  i  r,  i  •  o  r 

coiid  i  C  1  or.,--,  do  !  vsic  t  ioraiOTi-;:  c  dos  ^.•M;s-svst  ones  -ot  do  lours  dlo:vo''rs  critiquos,  or.  ,>  !■•  d  i  • .  •<  r' t  pai  o:ai-.|  !i 

lour  ohar^t  do  iraioai!  i  ■•.as-.ii-,  ot  d'assvua-r  los  rooi'iil' iguiair  i  sis  noco:-:-.,i  i  ros  lor--  li.'  d-  '  a.  i  !  j  ,i:a  ts-^ 

'  oqu  i  pon  oil  t  s .  I'outoM'is,  cotto  solutiiin  tianivo  sa  proprc-  limitation  d.ans  la  toiua-  do  so^>  :"pos, int 
o  i.oc  t  ron  iquos  ol  daiis  lo  n\’-.rbro  T  ir.i  d. '  oldm-.or.ts  ot  c.o  vessv'-v.rc  os  o-xbaYopid  os  . 

La  seule  pcssibiiitd  do  s '  a  1  f  r  anoh  i  r  ilo  cot  cnt>einhlo  Jini  ot  do  pou-.oir  intor’/onir  nora'  ipi-’-,  1  .ima.s' ss  r 
'OiisisCo  a  e:  loctuer  do  I'encrcticn  en  orhite.  Lotto  solution  consist<-  allor  rorqL,.icer  or,  rrl'ito  lo- 
oquipeinoMts  critiques  et  a  ravitaill.er  en  ergols  le  satellite.  Kilo  assure  done  la  p  rd- ’.a-a  t  i  os  '  out  roc  loi. 
svstdmat  ique)  ct  la  reparation,  et  ajouto  done  un  dei-rd  de  liberty  a  la  conception  du  satol’iro  c.ir  i! 
deviont  possible  de  dimensionner  la  masse  d'eryiols  ec  de  cUoislr  les  technologies  d'dlororis  critique-, 
pour  dos  duroo.s  de  vie  plus  coarces  quo  celle  spdciiioe  pour  lo  satellite.  L'dchanca'  do  touto  oi;  partio 
de  la  charge  utile  permettrait  meme  de  lairo  dvolucr  la  mis.sion.  Toutofois,  cecto  solution  .i  sos  contro- 
partLes  puisqu'elle  impose  des  regies  de  conception  ailaptoes  au  satellite  et  suppose  I’existence  d’uro 
intrastructure  orbitale  associoe  et  1 '  ut  i  1  isat  ion  de  notivelles  techniques  comme  le  rendex-vous.  I’assor.- 
blage,  la  robotique. 

Los  deux  solutions  sent  d'ailleurs  ccmploment.u  res  puisque  I'entreticn  en  orbite  fora  appel  a  l’inc»’?l- 
ligence  de  bord  di;  satellite  pour  assurer  un  certain  nombre  do  tonctions,  Ces  deux  technique.^  aurtmt  un 
role  important  dan.s  1  ‘  ut  il  i  sat  ion  d‘\in  .s.aicllito  •  longue  ou  trLs  longue  durce  de  vie. 
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Resume 


Les  applications  spatiales  du  futur  necessiterorit  de  develop per  ies  vlseurs 
d'etoile  de  hautes  performances  qui  permettront  soit  de  <iefinir  avec  precision  ties  refe¬ 
rences  d*attitude  de  plateformes  spatiales,  soit  de  rnesurer  I'attitude  du  vehicule  .ians 
I'espace.  Les  performances  accessibles  telles  que  la  magnitude  maxLmal*^  des  etoiles 
detectables,  la  luminance  du  fond  de  ciel  admissible,  la  resolution  angulaire,  ia  ca.len- 
ce  des  mesures  dependent  des  caracteristiques  physitques  intrinseques  les  detec teurs  et 
de  leur  mode  de  fonctionnement. 


L'objet  de  cette  publication  est,  d’une  part,  de  fournir  les  performances 
accessibles  aux  viseurs  d'etoile  a  tube  dissecteur  d'image  en  s'appuyant  sur  les 
equiperaents  developpes  et  realises  pour  I ' I PS/S pa c e 1 ab  et  le  satellite  EXOMAT,  d'autre 
part,  d'evaluer  leurs  avantages  et  inconvenients  compares  aux  equipements  u tills  ant  ties 
detecteurs  solides  a  transfert  de  charge.  Les  performances  sont  ana  ly sees  en  fonctlon 
des  proprietes  propres  aux  detecteurs  et  des  contraintes  technologiques  liees  a 
1 ' u t i 1 i sa t i 0 n  de  chacun  d'eux. 


PERFORMANCES  DES  VISEURS  D’ETOILE  A  TUBE  DISSECTEUR  D'IMAGE 

Au  cours  des  annees  1977  a  1979»  SODERN  a  developpe  une  generation  de  viseurs 
d'etoile  de  hautes  performances  pour  les  besoins  de  recalibration  de  I'lnstrument  Poin¬ 
ting  System  (IPS)  du  Sparelab  et  pour  le  controle  d'attitude  du  satellite  soientifique 
EXOSAT  qui  a  ete  lance  avec  succes  le  26  mai  1985* 

Afin  de  tenir  les  specifications  de  precision  danvS  les  conditions  d'envir'on- 
neraent  spatial,  le  concept  SODERN  comprend  1  '  u  t  i  1  i  sa  t  i  on  d'un  tube  iisvsecteur  i'lmagc 
(TDI  )  avec  un  systeme  de  recalibration  optique  qui  permet  d’obtenir  un  excellent  rapport 
champ/ precision. 

Principe  de  fonctionnement  du  viseur  d'etoile  pour  IPS 

Une  optique  focalise  le  flux  provenant  de  I'etoile  a  pours ulvre  sur  la 
photocathode  du  tube  (fig.  1). 

Les  electrons  venant  de  la 
photocathode  sont  acceleres,  focalises 
et  devies  par  la  grille  d'acceleration 
et  un  ensemble  de  trois  bobines  ce  qui 
permet  de  conjuguor  n’importe  quel 
point  de  la  photocat^i’de  avec  un  trou 
place  en  face  de  la  premiere  dynod*'» 
d’un  multiplicateur  d 'electrons.  Oe 
trou  deficit  la  dimension  d  u  h  a  m  *1  e 
V  u  e  i  n  3  t  a  n  t  a  n  e  <1  u  viseur  9  V  I  j  . 

Le  tuux  le  ''omptage  d<'3  ph'.j- 
t  0  n  3  venant  >1  e  i'etoile  sur  1 '  e  ti  d  r ;  >  i  t 
c  h  o  i  s  i  i  1  a  p  h  ■;  t  n  «  t,  h  o  d  e  s  t  m  .•  u  r  e 
par  u  n  ■  •  s  m  p  t  a  r  o  a  n  n  <•’  c  t  e  a  1  a  s  o  r  t  i 
d  '  u  ri  c  o  m  p  a  ra  t  »•'  a  r  . 

P '  j  i  r  1  '  a  p  ft  1  i  c  a  t  ion  1  P  3  , 
t  a  li  X  1  e  m  y  *  a  1  '  y  t;  s  -  • ; ;  r  i  t  ^  o  s  t  i  n  f  3  - 
r  i  e  u  r  a  f  -  a  p  3  '  e  1  t  ■  *■  a  n  1  i  s  q  u  *-•*  1  o 

taux  de  ''omf-lag'*  potir  I'eto’le  la  mains 
brillan^e  s  *■  s  s  r  ,  a  r  a  ^900  coups/ 
s  e  c  0  n  'i  e  . 


Mode  re  c  h  r  o  h 

A  p  a  r*  t.  1  r  1  '  u  n  e  j:-  o  :  ‘.ion  e  n  v  o  y 

>u  Ians  I 'hamp,  I  senseur  bal-ny* 
r  r  ^  e  n  t  »■'  n  f  i  g  u  r  . 


.Grilled  acceleration 


1  .  !'  r*  i  •  i  {  ‘*  1  u  V  i  s •’  1.  r  1  '  /'•  t  ('t  i  1  “  !  i 


n  ’  i  m  p  r  t  e 
r  e  c  h  e  r «;:  h  a 
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Pour  chaque  pas  e  1  erne n t a i  re  , 
le  taux  de  comptage  Ni  de  la  position  i 
pour  un  temps  d  '  i n t eg ra t i o n  T  est  com¬ 
pare  au  taux  de  comptage  N(i  -  2)  de  la 
position  i  -  2.  Si  la  difference  depas- 
se  un  seuil  qui  est  fonction  de  la 
magnitude  de  I'etoile  recherchee,  une 
nouvelle  mesure  de  confirmation  Nic  - 
N(i-2)c  est  effectuee  ;  si  cette  dif¬ 
ference  depasse  le  seuil,  I'etoile  est 
detectee  et  le  senseur  passe  automati- 
quement  en  mode  poursuite. 


Pour  une  probabilite  de  de¬ 


tection  (Pp)  et  une 
fausse  detection  (P 

le  temps  elementaire 
tion  du  mode  recherche 

probabilite  de 
p  n  )  determinees, 

CTg  )  d  '  une  posi- 
est  donne  par  : 

P2 

Te  =  — 

Ne 

(1 

+  2 

Nf 

Ne 

) 

ou  : 

etoile 

Ne  est 
en  coups/s 

le 

taux 

d  e 

comptage 

N  p  est 

le 

taux 

d  e 

comptage 

lie  a  la  luminance  du  fond  de  ciel  en 
coups/ 3 


P  est  un  coefficient  qui  de¬ 
pend  des  probabilites  PpQ  et  Pj). 


C^ampdevue 


Figure  2*  Principe  du  mode  recherche 


La  duree  totale  d'un  balayage  de  recherche  correspond  au  produit  du  nombre  to¬ 
tal  de  pas  N  par  le  temps  eleraentaire  Tg  ;  N  est  app ro x ima t i vemen t  pro po r t i onne  1  au 
carre  du  rapport  champ  de  recherche  sur  champ  de  vue  instantane  0CVI» 


Mode  poursuite 


Lorsqu'une  etoile  est  detectee,  un  motif  de  balayage  a  quatre  positions  (fig. 
3a)  est  utilise.  (Jn  systeme  en  boucle  fermee  permet  d'asservir  le  motif  de  balayage  de 
sorte  que  : 

N1  -  n2  «  N3  -  N4  =  0. 


ce  qui  fait  coincider  le  centre  du  motif  de  balayage  avec  le  centre  energetique 
1 ' image  de  I'etoile.  La  mesure  des  courants  qui  traversent  les  bohines  de  deviation 
tube  dissecteur  permet  de  connaitre  la  position  de  I'image  ie  I'etoile  sur  la  pho 
cathode  (coordonnees  bobines). 


d  e 
d  u 


Figure  3a.  Principe  du  mode 


La  figure  3b  represente  la  reponse  de  la  boucle  ;■  ix-- 

balayage  :  Ne  est  le  taux  de  comptage  etoile  en  c/s  (2^)'.)  *'.3  \  i  ’■  *  •.*  1 

distance  angulaire  o  o  r  r  e  s  po  nd  a  n  t  a  la  partie  lineaire  de  la  •  .  r  : -2:  •  . 


Figure  3b.  R  e  p  i  n  ,3*‘  1  •*  la  V  -  ■  u  •  1  i  ••  :  j  •*  u  .  . 
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Si  eat  la 
ge  du  au  fond  de  ciel, 
la  relation  : 


iuree  de 
la  re^5olu 


t  i  ■ 


:  a  1  'i  y  a 
1  e  ri  t  a  a 


;  f-  t  a  a  X  i  -  'Vj  r.  p  t  a  - 
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Syateme  de  recalibratlon  opticju*.* 

La  precision  p o  a  r  •  t  y  n e  i r.  f  .  a  r  a  t  i  > n  i  .A  p e n  1  : 

-  d  e  1  '  e  f  f  e  t  d  u  champ  m  a  g  n  e  t  i  4  i  e  s  a  r  1  ’  •  p  ^  i  e  L  1  e  t  r  o  ri  i  •  i  ►.  d  a  t  .1  b  e  d  i  s  s  e  c  t  e  u  r  d  *  i  m  a  g  e  , 

-  d  e  s  e  f  f  e  1 3  c  h  r  0  m  a  t  i  ^  a  e  3  ~\e  1  '  p  1 1  ^  ‘ * 

-  i  e  la  3  t  a  b  i  1  i  t  e  d  u  montage  m  e  •;  a  r.  1  3 e  .  p  I  .  j  n  e  -  T  L  I  par  rapport  a  u  x  points  d  e  fixation  d  u 

V  i  3  e  a  r  , 

-  de  la  stabilite  de  l'electr.jni4ue»  prin'*ipalement,  pour  le  courarit  de  focalisation,  la 
tension  d'acceleration  ie  la  grille  et  la  conversion  digitale-analogique  des  convertis- 
3 ears  foarnissant  les  courants  aux  bobines  le  <ieviation, 

-  de  ia  non  linearite  et  de  ia  stabilite  de  la  loi  de  deviation  en  fonction  des  coarants 
qai  circuient  dans  les  oooines. 

Les  effets  chromatiques  peuvent  etre  corriges  par  la  definition  de  I’optique 
et  les  effets  du  champ  magnetique  alternatif  par  1 ' i n t rod u c t i 0 n  d'un  blindage  approprie. 

Pour  les  autres  effets,  il  est  difficile  d’atteindre  une  linearite  et  une  sta¬ 
bilite  compatibles  avec  un  objectif  de  2.104  pour  le  rapport  c harap/ p re c i s i on . 

C'est  pourquoi  le  viseur  d’etoile  est  equipe  d'un  systeme  de  recalibration  op- 
tique  qui  projette  un  ensemble  de  400  (20  x  20)  etoiles  de  reference  dont  les  directions 
sent  parfaiteraent  connues  et  stables  par  rappport  a  I’axe  optique  du  viseur  qui  est  de- 
fini  par  des  miroirs  d'alignement  integres  a  I'optique  du  viseur  (fig.  4). 


p^hes  de  l  etoite 


■-’Lgurc  •»  .  Principe  >lu  systeme  de  reca  1  L  b  ra  t  i  on  optique 

^  f  1  1  X  !  u  m  i.  n  u  X  p  r  o  v  e  n  h  n  t  d  e  c  e  3  etoiles  d  e  reference  est  module  a  f  i  n  d  '  e  v  i  - 

t^'P  l‘‘*j  int»*rfercnces  mi  tu  el  les  av'=*c  les  etoiles  reelles.  Le  viseur  me  sure  alternative- 

men  t  L  ^  A  i"'  n  -)  r  i  o  n  n  ^  e  s  I'  '  i  b  i  n  e  3  d  e  1  e  t  o  i  1  e  r  e  e  1 1  e  p  o  u  r  s  u  i  v  i  e  e  t  1  *  *  s  o  o  e  r  d  o  n  n  e  e  s  bob  i  n  e  s 

les  t  r  j  i  s  e  t  o  i  I  s  a  r  t  i  f  i  i  e  1  I  e  s  qui  n  o  n  t  les  plus  p  r  o  c  h  e  3  d  e  1  '  e  t  o  i  1  e  r  e  e  1  1  e  .  Les  m  e  s  u  - 

r  s  Sir  les  e  t  s  i  1  *•  s  a  r  t  i  f‘  i  c  i  e  1  L  e  s  p  e  rm  e  1 1  e  n  t  d  e  c  a  1  c  u  1  e  r  la  loi  d  e  t  r  a  n  s  f  e  r  t  1  •'  passage 

1 s  c  ) ')  r  1  e  ri  n  e  e  s  bibines  aux  coordonnees  geometriques  qui  sont  directement  correloes  aux 

miroirs  de  reference  du  viseur.  L  ’  a  p  p  L  i  c  a  t  i  on  de  cette  loi  de  transfert  aux  c  1.' o  rd 'S  n  n  T?  e  s 

)  j  h  1  n  3  1  <=*  1  '  e  t  o  i  1  e  pe  r  m  e  t  i  e  i  e  1  i  v  re  r  les  co  o  rd  o  n  nee  s  geo  me  t  r  i  q  u  e  3  d  e  1  ’  e  t  >  i  i  1  e  ree  1  1  e  . 

La  1  iree  le  mesire  necessaire  au  caloul  de  la  loi.  >le  transfert  lies  coordonnees  to^bin'^s 
aux  '*  oorlonnees  ge  o  m  c  f,  r  i  q  u  e  3  e3t  -le  ”^6  3econde3. 

Co  process  is  le  corre«’tinn  se  deroule  co  n  t  i  n  u  e  1 1  emen  t  ‘ie  sorte  quo  1  c 
}ui  c n t  les  frequences  d'evolution  infLrLeiiren  seront  a u t oma t  i  q u en e n t  corrigees 
tilisation  du  systeme  de  re  c  a  1  i  b  r  a  t  i  o  ri  optique. 

'  e  f  f  I  c  a  c  i  t  e  de  ‘e  systeme  e  r^*  c:  3  ]  j  h  r  a  t  i  n  o  p  t  i  q  u depend  du  le  points 


d  e  r  i  V  e  s 
par  1 ' u- 


Pour  un  tube  ITT  F  4012  RP  utilise 
sur  un  diametre  de  photocathode  de  14  mm,  la 
figure  5  raontre  I'ecart,  en  microns,  entre  la 
position  reelle  de  I'etoile  et  la  position  me- 
suree  a  1  ecart-type  en  fonction  du  nombre 
d'etoiles  a r t i f i c ie 1 1 es  du  systeme  de  recali¬ 
bration  optique. 

Pour  le  viseur  d'etoile  SED  04  deve- 
loppe  pour  1*IPS  du  SPACELAB  qui  utilise  un 
ensemble  de  20  x  20  points  de  mire  de  referen¬ 
ce,  le  rapport  champ/ p rec i s i on  a  5  ecarts-type 
ressort  a  2,5«104,  ce  qui  eat  compatible  avec 
I’objectif  specifie  de  :  2’/0,7b  arc-sec 

9600  (3  )  qui  comprend  en  outre  les  effets 

des  derives  thermiques,  des  distorsions  chro- 
raatiques  et  des  variations  de  champ  magneti- 
que . 


16  ?0  2? 

■  X  K  <te  c>orits 

18  ?0  22  Oe  la  nwe 

de  retefence 


Figure  5-  Precision  de  recalibration 
en  fonction  du  nombre  de  points  de  mire 


Principales  ca rac t e r i 3 1 i a u ea  et  reaultata  experimentaux  du  viseur  d'etoile  SED  04 


Les  principales  c a rac t e r i s t i ques  du  viseur  SED  04  sont  resumees  dans  le 


tableau  1 


Ca rac ter is t iques  SED  04 

champ  de  vue  carre 

2' 

2° 

optique 


longueur  fooale 
diametre  d'ouverture 


deteoteur  tube  disaeoteur  d'image 
photooathode 
champ  de  vue  instantane 

eleotrique  cadence  des  informations 

frequence  de  fonc tionneraent 
du  mic ro p rooesseur 
memoire  PROM 
meraoire  RAH 
puissance  (20  a  32  V) 

dimensions  et  masse  : 

tete  optique  -  longueur 

-  diametre 


boltier  electronique  -  longueur 

-  largeur 

-  hauteur 


265  mm 
80  mm 

ITT  4012  RP 
S  20 

200pm/ 160  sec 

6  X  17  bit/sec 

16  MHz 
14  K  bytes 
2  K  bytes 
21  W 


550  mm 
210  ram 

7.5  kg 

245  ram 
2 1  0  ram 
1  60  mm 

4.5  k 


*  Mode  etoile 

.  magnitude  visuelle  Mv 

+  2  a  +  8 

•  mode  degrade 

9 

.  temperature  de  couleur 

3000  i  28000K 

.  luminance  du  fond  de  ciel 

8,4  p  lm/m2  s  r 

*  Mode  1  etoile 

.  temps  d ' a c q u i 3  i  t i 0 n  maximal 

76  s 

.  pou  rsu i te  : 

-  bande  passante 

2,2  Hz 

-  angle  equivalent  au  bruit 

0,3  sec/x/llK 

*  Mode  2  etoiles 

.  temps  d'acquisition 

152  3 

.  poursuite  : 

-  bande  passante 

1,1  H  r. 

-  angle  equivalent  au  bruit 

0,73  sec/  \/lr 

Linearite  et  stabilite  (a  3  e cart a  types)  | 

0  ,  ’’  3  3  e  c  (  3  o 

Tableau  1  -  Principales  c  a  r«  c  t  e  r  i  s  t  i  qu  e  s  du  viseur  d’etoile  P  K  I)  ')4 

uea  principaux  resultata  e  x  p':?  r  i  men  ta  ax  aorit  reaumea  Jans  i 

resultats  sont  re  p  r  e  s  e  n  t  a  t  i  f  a  Jes  mes-irea  effectuees  sur  les  6  viseiirn  i  *  G  I  •)  i 
produits  entre  1979  et  1983* 


Ca ra e t e r i 3 t i ques  SED  04 

Mode  1  etoile 

taux  de  comptage  pour  magnitude 
visuelle  +  8 

2800  c/s 

taux  de  comptage  pour  u!i  fond  de 
ciel  de  3,4  plm/m^  sr 

500  c/s 

.  temps  elementaire  d ' acq u i s i t i o n 

6 . 1  0  -  ^  3 

.  temps  d ' a cqu i 3 i t i 0 n  maximal 

o 

.  angle  equivalent  au  bruit  pour 
une  etoile  Mv  =  8  et  fond  de  ciel 

0,43  3  e  C  \/;i  7 

Mode  2  etoiles 

•  magnitude  visuelle  +  8 

2tK'0  c/i 

•  temps  d * acqu i 3 i t io n  maximal 

1  3  2  s 

.  angle  equivalent  au  bruit  pour 
une  etoile  Mv  =  8  et  fond  de  ciel 

0,7  3  e  c  \/h~7 

Stabilite 

.  linearite  de  reponse  en  fonction 
de  la  position  dans  le  champ  de 
vue,  pour  28*C  et  une  temperature 
oouleur 

0,43  3  c 

.  ecart  du  aux  differentes  tempera- 

0,2  3  e  c  7 

turea  de  oouleur  dans  la  garame 
(30CO-28000  K) 

.  ecart  du  aux  variations  de  tempe¬ 
rature  dans  la  gamme  (28  -  32“C) 
pour  la  tete  optique, 
et  dans  la  gamme  (+  10  *  50"C) 
pour  le  boitier  eleotronique 

0,1  sec 

.  influence  champ  magnetique 

0 , 4  gauss  3  Hz 

0,1  sec  '<  ,1 

Stabilite  totals  (somme  quadratique) 

0,32  sec  7  If 

Rapport  champ/ p rec is  ion  sur 
chaque  axe  (a  3  ecarts  types) 


Tableau  2  -  Resultats  e x pe ri men t aux  du  viseur  d  etoile  SED  04 


EVALUATION  BES  ^VANTAGES  ET  INCONVENIENTS  COMPARES  BES  VISEURS  D’ETOILE 


DISSECTEUR  D  IMAGE  ET  A  DETECTEUR  SQLIDE  DE  TYPE  CCD 

Les  principaux  parametres  qui  carac terisent  les  performances  d ' un  viseur  d’e- 
toi  le  sont  : 

-  la  resolution  angulaire  equivalente  au  bruit  pour  I'etolle  la  molns  brillante  en  fonc 
tion  de  la  cadence  des  raesures, 

-  la  duree  d  '  a  c  q  u  i  s  i  t  i  on  pour  I'etoile  la  moiris  brillante, 

-  le  rapport  c h a mp / p re c i s i o n . 

L'evaluation  comparative  pour  ces  parametres  est  faite  a  partir  du  tube  dis- 
secteur  d'  image  F  4012  RP  de  ITT  ayant  line  photocathode  S.20  et  d'un  detecteur  solide 
SID  32301  de  HCA. 

Resolution  angulaire  equivalente  au  bruit 

Pour  u  n  d  i  3  3  ^  c  t  e  u  r  d  '  i  m  a  g  e  ,  la  resolution  angulaire  equivalente  a  u  bruit  ('  R  A  ) 
estdonneepar:  1 

f  K  A  I  ■  ’  =  W  ’  .  _ 

(1/ 

ou  W  est  la  distance  ar.gu’.air»'  c  ■.»  r  r  e  s  po  n  d  an  t  a  la  partie  lineaire  le  la  bou('le  do  p'tur- 
suite  e  n  seconds*  d  ’  a  r  c  . 


Ne  T 


ou  T  est  la  duree  unitaire  d'une  boucle  de  poaryuite 


e  n  3 


Nf 

1+2  _ 

Ne 


Ne  l6  taux  de  coraptage 
Nf  le  taux  de  coniptage 


e  t  o  i  1  e  , 
d  u  f  o  r;  i  d  e 


c  i  e  1 


-nit 


Pour  un  champ  de  raesure  circulaire  C,  exprime  en  degres,  un  nombre  d'  ouvertu- 
re  optique  N,  un  diamitre  utile  de  photocathode  de  14  mm,  une  bande  spectrale  de  meaure 
correapondant  a  une  photocathode  S.20,  une  distance  angulaire  V  de  40pm,  un  champ  de  vje 
instantane  de  7bpm,  une  luminance  de  fond  de  ciel  Lf  en  candela/m^  et  line  etoile  dont  la 
temperature  de  couleur  eat  de  6000  K,  la  resolution  angulaire  equivalente  au  bruit  en 
aeconde  d'arc  est  donnee  par  la  relation  : 


(RA)2  =  _  .1,9.10-7  c4  n2  2,51""^  |l  +  ‘>,5.10-'  Lf  2 , 5 1  I 

IDT  T 


Pour  un  deteoteur  solide  ie  type  CCD  exploite  en  mode  poursuite  sur  une  zone 
elementaire  carree  de  0  x  3  pixels  et  utiliaant  une  tache  image  circulaire  ayant  un  dia- 
metre  de  deux  pixela,  la  resolution  angulaire  equivalente  au  bruit  (RA)  est  donnee  par  : 

1 

(RA)2  =  (d  imension  angulaire  d'un  ]>ixel)^  • - 


ou  la  dimension  du  pixel  est  exprimee  en  seconde  d’arc. 


pa  r 


En  negligeant  le  bruit  ie  lecture  du  CCD,  1‘.  rapport  signal /bruit  est  donni 


1  ♦  9  -  9  — 

Ne  Ne 


ou  T  est  la  duree  d ’integration  elementaire 
prise  identique  a  la  duree  d'une  boucle 
elementaire  de  poursuite  pour  le  tube  dis- 
sec  teur 

Ne  signal  etoile  en  electrons/s 

Nobs  CO u rant  d'obscurite  en 

electrons /a 


Nf  est  le  signal  du  au  fond  de  f?iel  sur  un 
pixel  en  electrons/s. 

Pour  un  ‘■’harap  de  mesure  carre,  de  diagonale  Co  exprimee  en  degres,  un  nombre 
d'ouverture  optique  No,  un  pixel  carre  de  30pra  de  cote,  une  bande  spectrale  de  mesure  de 
0,65pm  a  0,9um,  une  etoile  dont  la  temperature  de  couleur  est  de  6000  K,  une  luminance 
de  fond  de  ciel  Lf  en  candela/ra^,  un  courant  d'obscurite  =  12000.  2  if  etant  la 

temperature  de  f o nc t i o n n e me n t  du  CCD,  la  resolution  angulaire  equivalente  au  bruit  est 
donnee  par  la  relation  ; 


1 

(RA)2  =  _  .  0 , 29 . 1 0-7co4no2  2 , 5 1  1 1 

CCD  T 


6 , 5  .  1  0-3co2l(-2 . 5""' 


4.10-5.3 


'^/7.Co2no2  2,  51”'- I 


Resolution  angulaire  comparee  pour  un  fond  de  ciel  nul  :  L f  =  0 


Le  rapport  R 


(  lU  )  - 

CCD 

- -  est  donne  par  : 

(RA)7 

IDT 


R  =  0  , 

15  1 

(O'- 

1 

1  + 

^  .'J  ' 

'  f:  ' 

4  .  10-5 . 2  "/7  .  Co2no?2 , 5  1  | 


Dans  la  gamme  de  magnitude  vinuelle  allant  de  Mv  =  1  a  Mv  =  ‘d ,  on  peot  appro- 

cher  la  relation  ehamp-magriLtude  par  la  relation  : 

Mv  =  10,2  -  4,1  log  C  oij  C  eat  le  champ  circulair-  en  degres 

q  u  i  assure  l  a  presence  i  '  a  u  m  o  L  n  s  u  n*?  etoile  dans  1  e  '  h  a  m  p  j  “  v  u  e  0  q  u  1  1  ;  i  >-  .c  -  i  t  I’o- 

r  i  e  n  t  a  t  i  0  n  dans  la  v  o  u  t  e  > :  e  1  e  s  t  »-* . 


La  c o m p a  r a  i  s  o n  p  i  i  r  1  e s  2  i  e  t. e  c  t e u  r  s  i  ■)  i  t. 
equivalents  a  f  i  n  d  e  r  e  .3  p  e  i:  t  e  r  l  a  r  e  ]  .a  t,  i  o  n  h  a  m  p  '  m  a  g  a  i 
d  u  d  "  t  ♦*  c  t  e  u  r  o  1  i  d  e  doit  e  t  r  e  equivalent  a  u  a  •*  r  •'  i 
les  2  champs  0  et  Do  s  o  ri  t  done  1  ie:’.  par  la  pel  .  •:  : 


P  :ur  1“  •  ^ 
h  a  m  y-  c  a  nr* 


'v^ 


i  '  i  '■ 


i  r  “ 


-  t  . .  !>■ 


Atm  de  Tester  dans  un  do»naine  de  detinition  d  o^^tique  realiste  pour  des 
cnainps  de  vae  allant  ae  1°  a  12“  ,  on  t'ait  i'nypotnese  ^ue  ie  cha.np  et  i'ouverture  sont 
lies  par  la  relation  : 

C.N  =  constante  =  14 

Ho 

Le  rapport  —  est  pris  egal  a  1,4  afin  de  tenir  compte  du  fait  que  dans  son 
N 

principe  le  tube  dissecteur  h'est  que  peu  affecte  par  une  deformation  de  la  tache  image 
dans  le  champ.  Dans  cea  conditions,  le  rapport  R  devient  ; 

o 

R  =  0,15.(1,4)2.11  |l  +  4. 1  0-5 .2 ( 1  4  )2 . 2  ^  51  civ) 

4 

En  fonction  du  champ  de  raeaure,  R  devient  : 


R  =  0,74  1 


+  0 , 78 . 1  0-2 . 2  **'^7 . 2 , 5  1  '  2  -  4,1  logc| 


I 


Le  reaeau  de  courbea  pre-  (ra>^ccd 

sente  en  figure  6  explicite  I'evolu-  /raP»DT 

tion  da  rapport  H  en  fonction  du  4q.  y  /\ 

champ  ie  vue  et  de  la  temperature  de  y/  y/  ' 

fonctionnement  du  CCD.  II  montre  que  y/  y/| 

pour  obtenir  des  resolutions  angu- 
laires  comparables  pour  les  deux  ty- 

pes  de  ditecteurs,  il  est  imperatif  >0-  J/ 

de  refroidir  le  CCD  a  une  temperatu- 
re  inferieure  a  -  20‘C  et  que  cette  5_ 

contrainte  de  re  f  ro  i  d  is  se  men  t  est  y/  y/ 

d'autant  moins  severe  que  le  champ  3-  y^ yAy^y 

de  vue  du  viseur  augmente.  He  an-  2-  ^y^  y^y^y^^ 

moins,  des  que  la  temperature  de  y^yy^y^ 

fonctionnement  du  CCD  depasse  -  20*C  _ , 

les  resolutions  angu  laires  pour  les 

deux  types  de  detecteurs  ne  sont  '  ’ 

plus  comparables  car  le  rapport  R  o.5l - J  ^  ^ 

croit  tres  vite  avec  la  temperature.  ^ 

lemperature  u 

Figure  6.  Resolution  angulaire  comparee  des 
viseurs  a  CCD  et  TDI  en  fonction  du  champ  de 
vue  et  de  la  temperature  du  CCD 

Resolution  angulaire  comparee  pour  un  fond  de  del  fort 

Afin  de  decoupler  les  parametres,  on  suppose  ici  que  le  CCD  est  refroidi  a  une 
temperature  de  -  40*C  afin  de  negliger  I* influence  du  courant  d'obscurite. 


Le  rapport  R  s'ecrit  ; 

1  *  6,5.10-5  Co2  Lf  2,51"”' 

R  =  0,74 - 0 

1  »  5,5.10-5  c2  Lf  2,51'"'' 


6,5 

•  (r) 


On  pent  en  conclure  que  pour  des  luminances  de  fond  de  ctel  fortes,  I  s 
types  de  detecteurs  sont  equivalents. 

Puree  d*acqui3ition 

Pour  les  deux  types  d  e  detecteurs,  la  premiere  phase  i  '  a  c  q  u  L  i  t,  i  or;  ’  i  m  j  r“  a  i  ’.a 
detection  des  positions  dans  le  champ  de  viie  pour  lesquelles  e  signal  depass^-  ;ri  -..r'- 
tairi  seuil  qui  depend  ie  la  magnitude  attendue  de  I'etoilo.  Dans  ,'!;as'‘  1'* 

tion,  pour  assurer  que  les  p  ro  ba  h  i  1  i  t  es  d  e  f  a  «i3  s  e  detection  P  p  {  s  <’  i  i  !  '  1  r  a  ;  t  ;  L  -  ;  j  r 
a  il  n  c  e  r  t  a  i  n  e  v  a  1  e  ti  r  )  e  t  d  e  non  detection  Ph  D  (  s  i  gn  a  1  -  so  u  i  1  '  h  r  u  i  t.  a  a  m  • 

cortaLne  valeur)  sont  compatibles  ave-.:  les  besoins  de  mission,  \i  •  A'  .  r 

p  1  i  r  la  condition  : 


signal 


>P,  P  d&pend-int  .i<;  Pp.,  nt  P-,, 


'’Ians  la  mesure  ou  CCD  est  r*--froidi  a  uric*  t  •->  m  pe  r  a  t.  i  r--*  - 

d  e  n  e.g  1  L  g  e  r  la  c  o  n  t  r  i  li  u  t  i  o  n  1  u  courant  d  '  o  b^^  c  u  r  i  t  e  s.  u  r  1  •*  ra  p  p  •  r  ?  -i  ;  g  n  a  1 

1  '  a  c  q  'i  i  s  i  1 1  o  n  pai  u  r  1  e  CCD  sera  t  r  L  s  inferieure  a  ce  1  I  o  n  e  s  s  a  :  r  ••  }  •  •  :  f 

tear. 

?1  n  e  f  f  e  t  ,  olio  c  ..j  r*  r  p o  ri  1  a  p  p  r  n  x  i  m a  t  i  v  'cn  ••  n  *  a  i  *.•••’'.[  ;•  i  '  a  **  j  a  ;  • 

t  1  b  e  1  ;  s  s  e  c  t  u  r  1  '  i  m  a  g  car  1  e  rapport  s  :  c  a  a  1  'D  r  u  1  ^  •■it  1  u 


p  -'u  r  1  ^ 


le  it?i:netr^?  du  champ  de 


Si  est  le  diametre  du  champ  ic  vue  total  et 

vue  inatantane  pour  le  tube  disaecteur  ; 


tc 

"^acquisitionlDT"  — - -  •'^eleraerita  i  re 

V  i 

m  m 

"•  ac qu  i 3  i  t  i  o nC CD  e  1  eraen  t a  i  r e 


II  faut  cependant  remarquer  que  pour  la  majorite  des  applicatioaa  de  hautes 
precisions  le  domaine  de  recherche  peut  etre  limite  car  1 ' o r i e n t a t i on  grossiere  dans  la 
voute  celeste  est  con»iue  et  peut  done  etre  utilisee  afin  de  limiter  au  strict  necessaire 
le  nombre  de  pas  de  i-ccherche  pour  un  viseur  a  dissecteur  d’image. 

Rapport  champ-precision 

Les  resultats  theoriques  et  experimentaux  montrent  qu'en  utilisant  un  projec- 
teur  d'etoiles  ar t i f i c ie 1 1 es  de  400  points  sur  la  photocathode  d'un  tube  dissecteur  d'i- 
mage,  le  rapport  champ/precision  qui  en  results  est  d*environ  2,5.10*^.  L  '  u  t  i  1  i  s  a  t  i  on  du 
systeme  de  recalibration  optique  perraet  de  s’affranchir  des  variations  de  la  repartition 
d'energie  dans  la  tache  image  en  fonction  de  la  position  dans  le  champ  et  des  variations 
de  la  dimension  de  la  tache  image  produite  par  une  d e f oc a  1 i s a t i o n  liee  au  deplacement 
axial  relatif  photocathode-optique.  En  effet,  ces  fluctuations  sont  prises  en  compte  par 
la  mesure  des  etoiles  ar t i f i c ie 1 1 es  de  mire  car  dans  un  domaine  de  champ  delimite  par  un 
carre  de  4  points  de  mire  successifs,  les  variations  residuelles  sont  negl  igea b 1 es .  Seu- 
le  la  resolution  angulaire  est  un  peu  affectee  car  elle  depend  de  la  pente  de  la  fonc¬ 
tion  de  transfert  de  la  boucle  de  poursuite  qui  depend  lineairement  de  la  dimension  de 
la  tache  image. 

Le  rapport  champ/preciaion  de  2,5.104  n’est  pas  une  limite,  en  effet  il  peut 
etre  araeliore  soit  en  augmentant  le  nombre  d'etoiles  ar t i f i c i e 1 1 es  du  systeme  de  recaii- 
bration  optique,  soit  en  utilisant  un  algorithms  de  correction  supp 1 eraen ta i re  prenant  en 
compte  les  distorsions  georaetriques  locales  liees  aux  non  linearites  des  bobines  de  de¬ 
viation. 


Un  objectif  de  rapport  champ/ prec ision  de  5.104  a  8.104  est  tout  a  fait  envi- 
sageable  sur  un  equipement  op e ra t ionnel . 

Pour  un  detecteur  solide,  il  est  necessaire  d'utiliser  un  processus  d'interpo- 
lation  qui  conduit  a  distribuer  le  flux  du  signal  sur  plusieurs  pixels  et  a  utiliser  les 
reponses  fournies  par  les  pixels  individuels  afin  de  determiner  la  position  geometrique 
de  la  tache  image  en  fraction  de  pixel.  Les  limitations  apportees  par  la  non  uniformite 
de  reponse  d'un  pixel,  les  ecarts  de  position  et  de  dimension  geometrique  des  pixels, 
les  fluctuations  de  la  repartition  d'energie  dans  la  tache  image  en  fonction  de  la  posi¬ 
tion  dans  le  champ  et  de  la  composition  spectrale  du  rayonneraent  conduisent  a  une  limi¬ 
tation  de  la  qualite  de  1 '  i  n  t  e  r  po  la  t  i  on  de  I'ordre  de  1 /30erae  a  1/100eme  de  pixel  en 
fonction  de  la  complexite  du  traiteraent  et  de  la  calibration  ( mod e 1 i s a t i o n  de  la  reponse 
d'un  pixel,  memorisation  de  la  sensibilite  moyenne  pour  tous  les  pixels,  corrections  des 
defauts  geometriques  par  utilisation  d’une  regression  1 i n ea i re . . . ) .  Ceci  conduit  a  un 
rapport  c h am p/ p r ec 1 s i on  dans  la  gamme  7500-30000  sur  le  plan  theorique  avec  les  CCD  ac¬ 
tio  e  1  s  . 


La  tenue  de  ces  performances  necessite  d'une  part  le  re f ro i d i s s e m e n t  du  detec¬ 
teur  solide  et,  d'autre  part,  soit  d'utiliser  des  corrections  prenant  en  compte  les 
parametres  physiques  du  detecteur  (courant  d'obscurite  et  sensibilite  de  tous  les  pi¬ 
xels),  soit  <i' utiliser  un  cjomposant  pour  lequel  les  ecarts  entre  ces  parametres  physi¬ 
ques  sont  inferieurs  a  1  %  sur  I'ensemble  du  detecteur.  La  stabilite  du  positionnement 
relatif  du  detecteur  solide  et  de  son  optique  associee  est  elle  aussi  tres  critique.  En 
effet,  un  deplacement  relatif  transverse  de  i  0,5Mni  correspond  a  un  defaut  (i'alignement 
equivalent  de  1 /30eme  ie  pixel  qui  ne  peut  etre  corrige  que  par  1 ' u t i 1 i s a t i o n  d’un  sys¬ 
teme  de  r e ca 1 i b ra 1 1 o n  optique  ayant  au  moins  trois  etoiles  a r t ’  f i c i e 1 1 e s  .  Lea  variations 
’u  positionnement  axial  introduisent  des  variations  de  la  repartition  d'energie  dans  la 


tache  imnge  qui  sont  d'autant  plus 

cri tiques  que  1 ' 

'optique  utilisee 

est 

tres 

0  u  V  e  r  t  e  . 

Toutes  ces  contraintes 

d  e  repartition 

d'energie  dans 

1  a 

tac  he 

i.  m  a  g  e  , 

d  p 

conception  the rmo-raecan ique  et  d'evolution  des  parametres  de  calibration  (courant  d'obs¬ 
curite,  sensibilite  de  tous  les  pixels)  en  vieillisseraont  et  sous  contraintes  Je  rayon- 
nement  en  ambiance  spatiale  sont  difftcilement  compatibles  avec  les  besnins  d'un  equipe¬ 
ment  operation. .el  ;  ceci  conduit  a  penaer  que  pour  un  equipement  operationnel  de  struc¬ 
ture  simple,  une  capacite  d  '  i  n t e r po I  a t i o n  meilleure  que  le  1/10eme  de  pixel,  done  un 
rapport  c ha mp/ p r e c i s i o n  de  I'ordre  de  2000  a  4000,  eat  une  limite  raisonnable. 

Pour  ameliorer  le  parametrf?  champ/precision,  il  est  necessaire  d'une  part  d'u- 
tilisp^r  in  systeme  de  re calibration  optique,  d'autre  part  de  developper  des  method es  de 
defocalisatiori  le  la  tache  image  qui  permettent  de  res  ter  insensibles  aux  variation. a 
il  a  n  s  1  p  champ  d  e  vue  e  t  aux  variations  do  repartition  d  '  « n  e  r  g  i  p  i  a  n  .e  la  tache  pour  i  e  s 
d  e  p  I  a  c  e  m  e  n  1 3  r  e  1  a  t  i  f  s  a  x  i  a  u  x  o  p  t  i  q  e  -  d  e  t  e  c  t  e  u  r .  'I  n  e  solution  ^  .a  p  m  b  1  e  b  i  e  n  a  d  a  p  t  e  e 
c  o  n  9  i  3  t  e  a  utiliser  une  d  e  f  o  c  a  1  i  s  a  t  i  c  n  e  I  ec  t  ro  n  i  q  u  e  i  n  ♦  r  •  d  u  i  t  p  par  in  t  u  h  p  1  n  t  e  n  .s  i  f  i  - 


cateur  i  image  qui  permet,  par  aillears,  >1  ario  optii'ie  fa  -i 

de  rei?oudre  les  problernes  de  repartitions  d'ener-»i*‘  ians  la  ♦a-';'-  it.-w’--  i  a  :  a  ’ 

p  u  rerae  n  t  lies  a  1  ‘  o  p  t  i  qu  e  .  La  c  o  n  t  r  a  i  n  t  e  d  '  homoge  ne  i  t  e  .i  e  s  ♦:*  n  s  i  r  i  •  i  t  "  r--  ;i  t  :  v  <■  i  -  • 

pixels  (meilleure  ^ue  1  t)  reste  un  parametre  preponderant  ie  la  pjalite  1  '  :  r.  t  .•  r a  t  i  ; 
u  ne  solution  c  o  n  s  i  s  t  an  t  a  u  t  i  1  i  se  r  un  d  e  t  e  c  t  e  u  r  s  o  1  i  d  e  illuming  -  ’  a  r  r  ;  r*-  i  .* 

pe  rme  1 1  re  d  *  ame  1  i  o  r  e  r  la  iij  ua  1  i  t  e  d  e  1 '  h  oraogene  i  t  e  d  e  la  re  pon  s  •  .nr  1  '  t-  n  s t  1  --  i  u 

detecteur. 

C  e  type  d  e  concept,  lie  a  1  ’  u  t  i  1  i  s  a  t  i  o  ri  d  '  .u  n  e  o  p  t  i  q  u  e  1’  a  i  1 1  e  m  e  n  l  j  u  v  1*  t  e  , 

introduit  par  definition  une  diminution  du  rapport  s  i  g  na  1  b  r  u  i  t  et  nece.^.aite  de 

developper  des  photocathodes  ayant  un  ren dement  qu antique  et  une  sensibiiite  ameliore;> 
dans  la  bande  600-900  nin  (par  exemple,  des  ph  o  t  o  c  a  t  h  od  e  s  Asia)  ;  :e  type  de 

photo  cathode,  une  fois  developpee,  pourrait  elle  a  us  si  etre  integree  dans  un  tube 

dissecteur  d*  image. 

Une  approche  de  solution  pour  un  viseur  d'etoile  de  hautes  performances  a 

detecteur  solide  CCD  conduit  a  la  structure  suivante  : 

-  detecteur  solide,  ayant  une  homogeneite  de  reponse  meilleure  que  1  t,  illumine  par 

I'arriere  et  thermostate  vers  0 “ C  (I'apport  du  gain  du  tube  i n t e n s i f i c a t e u r  perraet  de 

limiter  I'effet  du  courant  d'obscarite  par  la  diminution  du  temps  d ' i n t eg ra t i o n ) , 

-  couplage  detecteur  solide-tube  intensi ficateur , 

optique  faiblement  ouverte  comprenant  un  systeme  de  recalibration  optique  a  trois 

etoiles  a r t i f i c ie 1 1 es , 


dont  les  performances  objectives  en  env i ronn emen t  spatial  seraient  aux 
1  /50eme  de  pixel,  done  un  rapport  c h a m p / p re c i s i ola  de  1  0000  a  20030"]^ 


envi rons  de 
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Aost ract 

_  Future  space  applications  will  require  developinq  niyn  pertor, nance  scar 
tracicers  to  provide  with  either  high  accurate  attitude  reference  or  rneasuremenc  tor 
spaceborne  platforms.  The  achievable  cnaracter ist ics  such  as  detectable  star  maximuin 
magnitude,  allowable  sky  oacKground  radiance,  angular  resolution,  time  resolution  uepena 
on  detectors  intrinsic  physical  characteristics  and  internal  operation. 


The  aim  of  this  paper  is,  on  one  hand,  to  give  performance  characterise  ics 
wnich  can  be  acnieved  with  image  dissector  cube  star  trackers  based  on  equipment  manu¬ 
factured  for  IPS/Spacelao  and  Exosat  satellite,  on  the  otner  hand,  to  inake  an  assess¬ 
ment  of  their  advantages  and  drawbacks  with  respect  to  equipment  based  on  solid  state 
devices  of  charge  transfer  type.  The  analysis  of  the  per f orinances  is  presentea  versus 
the  intrinsic  characteristics  of  tne  detectors  and  the  technological  constraints  reiateu 
to  their  use. 


PERFOKiylANCES  OF  IMAGE  DISSECTOR  TUBE  STAR  TRACKERS 

During  the  years  1977  to  1979,  SODERN  nas  developed  a  nign  perfonnance  star 
trackers  generation  for  the  tecal ibrat ion  needs  of  tne  Instrument  Pointing  System  (IPS) 
of  Spacelab  and  for  tne  attitude  control  of  tne  EXOSAT  scientific  satellite  whicn  nas 
been  launenea  witn  success  on  May  20,  19S3. 

In  order  to  hold  tne  accuracy  specifications  in  space  environjnent  conditions, 
the  SODERN  concept  uses  an  image  dissector  tube  (IDT)  together  witn  an  optical  recali- 
bration  system  which  allows  to  achieve  an  excellent  field/accuracy  ratio. 

IPS  star  tracker  working  principle 

An  optical  aevice  focuses  light  coming  from  the  star  to  be  tracked  on  tne  tube 
photocatnode  (fig.  1). 


Electrons  coming  from  tne 
pnotocathode  are  accelerated,  focused 
and  deflected  by  an  acceleration  mesh 
and  a  set  of  three  coils,  in  such  a  way 
that  any  point  of  the  pnotocathode  may 
go  through  a  hole  facing  the  first 
dynode  of  an  electron  multiplier.  This 
hole  determines  the  tracker  Instanta¬ 
neous  Field  of  View  (IFOV). 

The  rate  of  photons  coming 
from  the  star  on  a  selected  part  of  the 
photocatnode  is  measured  by  a  counter 
connected  to  the  comparator  output. 

Concerning  tne  IPS  applica¬ 
tion,  the  darx  count  rate  is  lower  than 
20  counts  per  second  and  the  counting 
rate  corresponding  to  the  dimmest  star 
to  be  tracked  is  2500  counts  per 
second . 


Accetocating  mesh 


Preamplifier 


Deflection 

cons 


Search  mode 


Figure  1.  IPS  star  tracxer  principle 


Starting  from  a  point  which  position  can  be  set  by  commands  anywnere  in  tne 
field  of  view,  the  sensor  scans  the  field  of  view  along  to  a  search  pattern  shown  on 
f  igure  2 . 


tor  eacn  e  i  a.aent  a  1  y  st-.-p,  t::i- 
Ni  counting  rate  ot  tne  i  pi)aiti.)ii  tan 
a  T  intejration  t  i.ne  is  compare. i  to  t  tea 
counting  rate  N  (i-2)  of  tne  i-2  p.isi- 
tion.  If  tne  difference  exceeds  a  .jiven 
threshold  in  relation  witn  tne  searcned 
star  magnitude,  a  new  confirmation 
measure  Nic-N(i-2)c  is  undergone  ;  if 
this  difference  exceeds  the  tnresnold, 
the  star  is  detected  and  the  sensor 
automatically  starts  working  in  a 
tracking  mode. 

For  a  (Pq)  probability  of 
detection  and  a  (Ppo)  prooability  of 
false  detection  set  in  advance,  tne 
(Tg)  elementary  time  of  a  search  mode 
position  is  given  oy  : 


Tp  =  _  (1  +  2  —  ) 


where  : 

Ng  IS  tne  star  counting  rate 
in  counts/s ’ 

Nf  is  the  counting  rate 
related  to  sky  background  radiance  in 
count  s/s 

f  is  a  coefficient  depending 
on  Ppp,  and  Pp,  probabilities. 


STAR  DETECTHD 
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Search  pattern 


Figure  2.  Search  mode  principle 


The  total  duration  of  a  search  scanning  corresponds  to  the  product  of  tne 
total  number  of  N  steps  by  tne  Tg  elementary  time  ;  N  is  approximat ively  proportional 
to  the  square  of  the  0g  search  time  on  0ifov  instantaneous  field  of  view  ratio. 

Tracking  mode 

When  a  star  is  detected,  a  four-position  scanning  pattern  is  used  (fig.  2a).  A 
closed  loop  system  allows  to  drive  tne  scanning  pattern  in  such  a  way  that  : 

N1  -  N2  =  N3  -  N4  =  0, 

that  makes  the  scanning  pattern  centre  coincide  with  tne  image  or  star  energy  centre. 
Measurement  of  currents  going  tnrough  the  dissector  tube  deflection  coils  allows  to  know 
the  star  image  position  on  the  photocathooe  (coiis  coordinates). 


Counting 

electronics 


Figure  Ja _ Tracx ing  mode  principle 

Figure  ib  shows  the  tracking  loop  response  following  a  scanning  axis  :  Ne  is 
the  star  counting  rate  in  c/s  (2500  c/s  for  Mv  =  8)  and  W  is  the  angular  iiistance 

corresponding  to  tne  linear  part  of  tne  response  curve.  * 
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It  i'j^-  IS  the  iF.easare  JurdCion  ot  a  scanning  pattern  airi  tne  cojiiLinj 

rate  aae  to  sKy  uackj  round ,  tfie  anjuiar  resolution  equivalent  to  noise  i<A  is  jiven  i<^  : 

N  j: 

(RA)‘^  =  -  .  (  1  +  2  - ) 

Ne  Tf,,  Ng 

Opc ICS  cecal ibrat ion  system 

Accuracy  tor  tnis  type  of  configuration  depends  on  : 

-  inagnetic  field  effect  on  image  tube  dissector  electronical  >:>ptics, 

-  optics  chromatic  effects, 

-  stability  of  lUT-optics  mechanical  mounting  with  regard  to  tracKer  [ixation  points, 

-  electronics  staoility,  especially  for  focusing  current,  mesh  acceleration  voltaje  and 
digital  to  analog  conversion  of  converters  providing  current  to  deviation  coils, 

-  non- 1 1  near  1 1 y  and  stability  of  deviation  law  in  ter, ns  of  currents  circulating  in  the 
c  o  1  1  3 . 

Cnronatic  effects  may  oe  corrected  by  optics  definition  and  effects  ot  alter¬ 
native  magnetic  field  oy  introducing  an  appropriate  shielding. 

For  other  effects,  it  is  difficult  to  reach  a  linearity  and  a  stability 
.iiatciiing  a  2.10'*  Objective  tor  tne  accuracy/f  ield  ratio. 

That  IS  way  the  star  tracker  is  eguipped  with  a  recal  lorat  ion  optical  system 
wnicn  projects  a  set  of  400  (20  x  20)  reference  stars  wnicn  directions  are  perfectly 
xnown  and  steady  with  respect  to  the  tracxer  optical  axis  wnicn  is  defined  oy  alignment 
tirrors  integrated  in  tne  tracker  optics  (tig.  4). 


_tdgure  4.  *  iotut  ion  _s;^st  o.n  _pr  i ac  i p^e 

Light  fi  w  coming  from  tries./  r./i.-i/nc"  .r  u  ,  is  u,idjlut"d  in  oruor  t  ,j  uvoiu 
mutual  interferences  with  real  stars.  The  tr  icxer  iltuinit  iv"iy  ii/uiir./s  coils  coordi¬ 
nates  of  tne  real  star  tracked  and  trie  coils  .■/■■i  iinat,-.  il  ,  arriricial  stars  wnicn 

are  trie  nearest  to  the  real  star.  -R-asir";  ..n  irtili.  iil  it  ,  to  caK  ilar,/  tne 

transfer  law  of  coils  coordinates  t.i  g-'osu'tt  lal  .-i.i  uiut'  wni.-i  ir,-  iirs'ctly  i.'iat'/.i 
to  tracxer  reference  .nirrors.  .'ne  appii./i’  lo.i  o|  -.i  ,  -i  ind  i'  law  t  >  coils  co  ,  t  i  i  n  it  ■/., 
ot  tiif'  star  allows  to  deliver  jeonu/t  r  i  ci  1  .-,,1  iisit,-,  ,i  '.c  i-si!  ;•  u  .  I'ni'  .acas.ure  i  iiin' 
:!•'  r  ;  s  j  r  /  to  ca  1  c  a  1  o'-  o  r  ,i  *  t  r  i.i  s  1  •  t  .aw  o  i  c  >  i  i  .  co  ,i  i  i , ,  ir  .  ■  .  ;  ,  r  ■  r  i  c  a  1  coor ,  i  i  n  i'  s 

IS  Ih  seconds. 

Tn  1  ,,  .■orr-’',/r  cn  |ir  w  ax 

• '  /  o  1  i r  1  .1  a  1  t  I  1,' n.’  1  ,  its  .  :  a’  i  c  i  i  ; 
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c  I  s  .■ ,  )  1  y  .  ,  1  c  ]  r  1  t  '  ,  wnicn  1  r  ,•  1  ows  t 

c  J  r  r  .  y  1  .  1  1  r  in  n  1  c  j  1  t'  ■  >  c  a  1  l  . ,  t  1  r  1  ■ ,  1 


Fur  an  I  l’T  t  40  KF  t  joe  on  a 

14  .nm  pnococatnode  diameter,  tijare  riauw:- 
tne  dicterence  in  microns,  oetwocn  tno  po3l- 
t  ion  of  real  star  and  the  position  maasureo  at 
one  standard  deviation  versus  the  nuiiiuer  wt 
artiticial  stars  of  tne  optical  recal lorat ion 
s  y  s  t  e  in  • 

for  tne  SED  04  star  tracker  uevolo- 
pea  for  tne  SPACELmB's  IPS  wnieh  asen  a  set  ijt 
20  X  20  reference  pattern  points,  the  field' 
accuracy  ratio,  at  1  standard  deviations,  is 
2.d.1u‘*,  coiiipatiole  witn  ^ne  specified 
re.ju  1  re  iient  s  of  :  2°/0.70  arc  oec  =  51bUU  {idi 

includinj  all  eftects  aue  to  tner.iial  drifts, 
cnro.natic  distortions  and  ma'jnet  ic  iield 
V  a  r 1  at lun  s . 


Peca  1 1 1  rat  1  on  accuracy 
according  to  pattern  points  numoer 

[■Idin  cnaracter  1st  ics _ and  experimental  results  of  tne  SED  u4  star  tracxer  developed  for 

tne  SpacelaD  Instrument  Pointing  Syst ein 

Tne  main  char  act er i st ics  of  the  SED  04  tracxer  are  summarized  in  taole  1. 


SED  04  Cnaracter 1st  1C 


square  field  of  view 


opt ics 

focal  lenych 
aperture  diameter 

detector 

imaye  tuoe  dissector 
photocacnode 

instantaneous  field  of  view 

electric 

output  date  rate 

microprocessor  operation  frequency 
PKOM  memory 

RAM  memory 
power  (20  to  32  V) 

Ti.e  indin  experimental  results  are  summarizea  in  taule  2.  1‘nese  result-i  are 
representative  ol  the  measures  carried  out  on  the  six  SLU  04  star  trackers  manul act  urea 
net  ween  ly7y  an  lyal. 


SED  04  Characteristics 


One-star  mode 

counting  rate  tor  a  +  8  visual  magnitude  i 

counting  rate  tor  a  8.4  plm/ra^  sr  sky  back¬ 
ground 

.  maximum  acquisition  time 

.  noise  equivalent  angle  for  a  Mv  =  8  star 
and  sky  oackg round 

u . 

2800  c/s 
300  c/s 

70  s 

4  3  sec/  , 

^Hz 

Two-star  mode 

.  +  8  visual  magnitude 
.  maximum  acquisition  time 

.  noise  equivalent  angle  for  a  Mv  =  8  star 
and  sky  oackground  i 

0  . 

2800  c/s 
132  s 

7  sec/,^ 

Hz 

St  au 1 1 1 1  y  1 

.  response  linearity  related  to  position  in 

0 

.43  sec 

3  (T 

tne  field  of  view  for  28°C  and  one  colour; 
temperature  in  the  (JOOO-2800U  K)  range 
.  deviation  aue  to  uifferent  colour  tempe-  I 

0 

.2  sec 

3  (7 

rature  in  tne  ( 3OUU-380UU  K)  range  j 

.  deviation  du  to  temperature  variations  j 

0 

. 1  sec  3 

<r 

in  tne  (28  -  32‘’C)  range  tor  tne  j 

optical  head, 

and  in  the  ( t  10  +  iO'C)  range  tor  the 
electronic  oox, 

.  magnetic  tie  Id  effect 

0 

.  1  sec 

3  (J 

0,4  gauss  <  3  iiz 

Total  stability  (root  sum  square) 

u 

.  5  z  Sec 

3  (T 

F  i  e  1  d  acc J r acy  ratio  on  eacn  axis 

[i  standard  deviations)  j 

1  3  8  3  U 

_-L 


'1'  a  Li  I  e  2  -  Lxper  iinehtal  results  ot  tne  SEP  04  star  tracker 
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b  VA  iiU/\  r  I  Ob  COMbMKbD  ADVANTAGCiS  ANU  Ur<yXwB/\CKS  Ob  IMAOb  l.)  I  SSbCTOH  TUBE  AND 


CCD  TYPE  SOLID  STATE  DeTECTUK  STAR  TRi^C^KKS 


I'hh’  ,nj  L  n  paL'ainet  ers  cnaracter  i  zin^j  st  av  cracKer  l  or .nancaa  are 


ec]  .1 1  va  lent  aivguiar  resolution  tor  the  <llinlne^3t  star  in  t';n';ns  el  nea.-uireinent  s 

rat  e , 


acquiaition  t  i,ne  t‘.)r  tne  dimmest  star, 
t  1 1 ‘  I  >J  jv-C'  1  r  1  o  /  r  at  i ' ) , 


o.  ,1  r  at  i  V asS'js.sment  t  )\'  ’nese  o.ji'a.n’T  .‘f  i,.  -'art  I'-o  m.it  .-it  u'"  inj  l  r-.ru  tne 

1  r  r  F40  1  J  i.tjj';*  Oissect  .)r  c  Joe  exjui;;:.!-  j  witn  ‘>1  ••  a  oiior  )c'at  a- ana  a  KrC\  S 1 U 

.V  >  I  1  a  3 1  at  »■  'i  ‘’t  eat  I  >  r  . 
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b'f  an  i.n.ij-'  a  1  .3  a*' v'L .  )r  tao**,  tre'  n-)i.->'*  ••  .|a  i  ^  t  i  •‘:it  .la^aiar  r--.>oi  a  i‘>ii  ^  ;-;A  i  i. 
;  1 

{  ;-<A  ,1  =  A  *"  . - 


)  I  vt^n 


I  DV 


wre-T-'  A  1 


i n  E 1 1  a r  1  i  ..t . iru'- 


na in }  r  '  r  n  •  I  1 


•  J 


For  a  ^  circjiar  in  i-*  j  ro*.‘--s ,  4  :>J  n.iu;i-'r:  wL  i  j 

aperture,  a  14  .Hin  pnococut  o  1  u.ii'jt  »*r  ,  u  .iim*  1  n.  .*■  n  i.  "..ij  >!kj  ^  ,1  1 

to  a  S.20  phot  ocat  iiode ,  a  40  p;«i  W  arijular  iiutarjo*.-,  a  7  •>  piii  1  n^•,r  jnc.  a;i''<v  j.,  :  1  -i-i  ji’-w, 
a  Lj--  Sfcy  uacK'jroanU  radianoe  in  oaruK-ia/.n^  ,inu  a  .it  ir  ««/it:i  ^  bni;u  K  O'-iovir  t.  •  Mip- •  r -jL  j  t , 
the  noise  epuivaxent  ariv^uiar  re.:ioiution  in  aro  sec  i.i  oy  : 


(KA)-^  =-.1,4.10 

IDT  T 


1^,  2,  I 


For  a  CCD  type  solid  state  detect. 5r  op-,  raf^d  in  tracKinj  jiu.'Je  on  a  J  :<  l 
pixels  s.-juare  elementary  area  asing  a  circular  i.na.je  spot  with  a  2-pixel  diaineter,  nois.? 
equivalent  angular  resolution  ( RA )  is  given  oy  : 

1 

( RA ) ^  =  (angular  di, tension  of  one  pixei)^  . - 

(!) 

'  B 

wnere  pixel  dimension  is  jiven  in  arc  sec. 


given  py  : 


Without  taking  into  account  tne  CCD's  reading  noise,  signal/noise  ratio  is 

where  T  is  tne  ele.nentary  integration  time  cnosen 

Identical  to  tne  time  of  an  ele.nentary 
M„T  tracking  loop  for  tne  dissector  tuoe 


Nf 

+  y  — 
N« 


Np  is  tne  star  signal  in  electrons/s 

Nqos  tne  UacK  current  in  electrons/s 

Nj.-  IS  tne  signal  aue  to  tne  sxy  Qacxgrounj  on 
a  pixel  in  electrons/s. 


For  a  square  ineasureinent  field,  with  a  Co  diagonal  given  in  degrees,  a  No 
optical  aperture  numoer,  a  JU  pm  square  pixel,  a  0.6b  pir.  to  0.9  pm  measurement  spectral 
oandwidtn,  a  6000  K  colour  temperature  star,  a  Lf  sxy  bacxground  radiance  in  candela/m^, 
a  NgQg  =  1  2000  .  2  ,  II  Deing  tne  CCD’s  operating  te.nperat  are ,  tne  noise  equivalent 
angular  resolution  given  oy  :  ' 


(KA)2  =  _  .  0,29  .  10~’^Co''No'^  2,bl^v 

CCD  T 


+  6,5. 10"-*Co2L|.-2,5"''''  +  4. 10”^. 2 


*^7  |.,.2m„2 


Co‘^No‘‘  2,51' 


Compared  angular  resolution  for  zero  sky  oackground  level 


The  R  rat io 


IS  given  oy  : 


/No,^  _  ,1/ 

I, lb  ^ — j  .  ^  —  I  |1  +  4.10'''. 2  '  '.Co-'^i4o"^2,51' 


In  the  visual  .nagnitude  range  covering  Mv  =  1  to  Mv  =  d  ,  tne  i  i  .■  Id  /  mag  n  1 1  ude 
relation  may  ne  approacned  oy  : 

i4v  =  10.2  -  4.1  log  C  where  C  is  the  circular  field  in  iegrees 

wnicti  maxes  us  sur.i  that  tnere  is  at  least  one  star  in  tne  C  liel.i  ol  vi.’W  wnatevier  is 
tne  orientati'in  in  the  celestial  sphere. 

Comparison  for  tnese  two  ilet.ictors  nas  t.  Oe  ,nade  t^ir  ..quivil.'nt  '.olio  angl.'S 
in  .order  to  re.spect  tlie  f  i I  d/ ma  g  n  1 1  ude  relation.  Tne  Co/vAl  x  Co  N/IT  soliii  sla'.'-  det.vctJt 
square  field  nas  to  oe  equivalent  to  tne  C  imj'.je  .iissector  cir  'ulir  i  i.-l  i  ;  tn"  and  .  .. 
fields  .ire  tnus  related  by  : 


2 


In  ordec  to  keep  in  d  reasiltic  optical  definition  ramje  lor  fields  ol  vi>;w 
from  2°  to  12°,  we  suppose  tne  field  and  aperture  tein-j  related  oy  ; 

C.N  =  constant  =  14 


No 

Tne  —  ratio  is  considered  equal  to  1.4,  so  as  to  taxe  into  account  ciiac  in 
N 

Its  principle,  tne  dissector  tuDe  is  very  little  affected  ny  an  i.iiaje  spot  distortion  in 
tne  field,  in  tnis  condition,  the  K  ratio  oecomes  : 


2 

i<  =  J,  1  a.  (  1  ,4)  I  1  + 

4 

In  ter. ns  of  measurement 
rc  =  a  ,  74  1 1  + 


4  .  1u“5.2  (  1  4)  '^.2,  j1‘'’'^  I 

field,  R  becomes  : 

0,7a.  10--^.2  '*'^7_2,51  “  'I  •  ' 


lo.jc| 


Tne  curves  snown  on  figure 
0  clear  tne  evolution  of  tne  R 
ratio,  in  teriiis  of  field  of  view  and 
cCO's  operating  temperature.  It 
snows  that  getting  angular  resolu¬ 
tions  comparable  for  tne  2  types  of 
detectors  requires  to  cool  tne  CCD 
down  to  less  tnan  -  20°C  and  that 
this  cooling  constraint  is  all  the 
less  severe  a;3  tne  tracker  field  of 
view  increases.  Nevertheless,  as 
soon  as  tne  CCD's  operating  tempera¬ 
ture  is  .nore  tnan  -  20°C,  angular 
resolutions  tor  tne  2  types  of 
detectors  are  not  comparable  any 
more  uecau.se  trie  R  ratio  increases 
very  quickly  versus  temperature. 


COiTipared  ang  u  1  ar  reso^ut  lun  tor  a  h  ign  sky  uackg round  level 

In  ord’.-r  to  lepurate  parameters,  we  suppose  tne  CCD  being  cooled  down  to 
4u°':  1  ■  .j  ,  r.')  rieg.'  Cr  i,jrK  current  intluence. 


'  r  t  1 1  i  o  1  '■  w  r  1 1 1  ■ n  : 


b,u  Co  ^ 
u,7..  (_)  = 


... 
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It  nas  to  be  noticed  tnat  tor  most  of  high  accuracy  applications,  the  tracKinj 
field  may  be  limited  because  rough  orientation  in  the  celestial  spnere  is  Known  and  thus 
may  be  used  in  order  to  limit  to  more  than  necessary  the  number  ot  searching  st.jps  for 
an  image  dissector  tracKer. 

Field-accuracy  ratio 

Theoretical  and  exper i.nental  results  show  that  when  using  a  400  points  artifi¬ 
cial  stars  projector  on  an  image  dissector  tube  photocathooe ,  tne  resulting  fieia/accu- 
racy  ratio  is  around  2,h.l0^.  Using  the  optical  recal lorat ion  system  allows  to  breax 
free  froiti  energy  distribution  variations  in  tne  linage  spot  witn  respect  to  position  in 
tne  tield  and  size  variations  of  tne  image  spot  produced  by  a  defocusing  reiated  to 
pnotocatnode-opt  ics  relative  axial  shifting.  Indeed,  these  fluctuations  are  considered 
by  means  ot  pattern  artificial  stars  measurement  because  in  a  reduced  field  limiteu  oy  a 
square  of  4  successive  pattern  points,  residual  variations  nave  to  oe  taxen  into 
account.  Only  tne  angular  resolution  is  a  bit  affected  because  it  depends  on  tne  trans¬ 
fer  function  slope  of  tne  tracking  loop  depending  linearly  on  tne  image  spot  size. 

Tne  2.5.10“*  f leld/accuracy  ratio  is  not  a  limit,  it  may  oe  bettered  either  by 
increasing  the  number  ot  artificial  stars  of  the  optical  recal i brat  ion  system,  or  by 
using  an  adaitional  correction  algoritnra  taxing  into  account  local  geometric  distortions 
related  to  non-i i near i t y  of  deviation  coils. 

A _ 5  ■  1  u“*  to  a  .10'*  f  ielo/accuracy  ratio  obiective  is  quite  foreseeable  on  opera- 

t lonal  equipment 

For  a  solid  state  detector,  the  use  of  an  interpolation  process  is  required. 
It  leads  to  dispatch  signal  flow  on  several  pixels  and  to  use  tne  responses  given  oy 
single  pixels  in  order  to  determine  tne  geometric  position  of  image  spot  in  pixel  frac¬ 
tion.  Limitations  orougnt  by  pixel  non-uniformity  response,  pixels  position  and  geome¬ 
tric  size  deviations,  energy  dispatching  fluctuations  in  tne  image  spot  in  terms  of 
position  in  tne  field  and  radiance  spectral  composition  lead  to  limit  the  interpolation 
quality  ot  about  l/30tn  to  1/100  tn  pixel  in  terms  of  treatment  complexity  ana  calibra¬ 
tion  (pixel  response  model isat ion,  average  sensitivity  memorization  for  every  pixel, 
geoinetric  defects  corrections  by  using  a  linear  regression...).  Tnis  leads  to  a  75uu- 
3UU00-range  t leld/accuracy  ratio  on  tne  tneoretical  level  witn  tne  existing  CCDs. 

Reacning  tiiese  pertor(nances  requires  firstly  to  cool  down  tne  solid  state 

detector  and  secondly  eitner  to  use  corrections  taxing  into  account  detector  physical 
paraiiieters  (darx  current  and  sensitivity  of  all  pixels),  or  to  use  a  component  for  wnich 
tne  variations  between  tnose  physical  parameters  are  lower  than  1  t.  tor  tne  wnoie  detec¬ 
tor.  Positioning  stability  relative  to  tne  solid  state  detector  and  associatea  optics  is 
very  critical  too.  A  transversal  relative  displacement  of  ±  0.5  pm  corresponds  to  an 
alignment  defect  equivalent  to  l/30tn  pixel  wnicn  can  only  oe  corrected  oy  using  an 
optical  recal lorat  ion  system  with  at  least  tnree  artificial  stars.  Axial  positioning 
variations  introduce  energy  distribution  variations  in  the  image  spot  ;  tney  are  tne 
more  critical  as  tne  optics  nas  a  low  aperture  number. 

All  tnese  energy  distribution  constraints  in  the  image  spot,  of 

t  nermo-iiiech  an  ica  1  conception  and  calibration  parameters  evolution  (darX  current, 

sensitivity  ot  all  pixels)  in  ageing  and  under  radiance  constraints  in  space  environment 
do  not  easily  tit  requirements  of  an  operational  equipment  ;  tnis  leads  to  cninX  that 
for  a  simple  structure  operational  equipment,  tne  reasonable  limit  Cor  interpolation 

capacity  is  better  tnan  1/lOtn  pixel,  tnus  a  f leld/accuracy  ratio  of  around  2000  to 
4000^  " 

In  order  to  improve  the  f  leld/accuracy  parameter,  we  need  on  one  hand,  to  use 
a.i  optical  recal  lorat ion  system,  on  tne  otner  nand,  to  develop  image  spot  aefocusinj 
metnods  allowing  tne  equipment  not  to  oe  sensitive  to  variations  in  tne  field  ol  view 
ana  to  energy  distribution  variations  in  the  spot  tor  optics-detector  axiai  relative 
displacements.  A  well  adapted  -  so  it  seems  -  solution  consists  in  using  an  electronic 
defocusing  induced  oy  an  image  intensifier  tube  allowing  in  other  respects,  to  use  a  low 

aperture  optics  so  as  to  solve  energy  distribution  problems  in  tne  linage  spot  wnicn  are 

only  related  to  optics,  xelative  sensitivity  noiiiogene  it  y  constraint  of  pixels  (oette-r 
tnan  1  t)  remains  a  leadinij  paruineter  tor  interpolation  quality  ;  a  solution  consisting 

in  using  a  solid  state  detector  illuininated  tro.n  tne  oacxsiiie  snould  allow  to  improve 

homogeneity  .guaiity  of  response  on  tne  wnoie  detector. 


.'•IS 


This  type  ot  concept,  related  to  tne  use  of  a  low  aperture  optics,  introduces 
s  iLjnai /no  1  se  reauct  ion  and  requires  to  develop  piiotocathodes  witn  a  quantum  efficiency 
and  a  sensitivity  improved  in  tne  bUU-dUO  nm  oandwidtn  (for  instance,  AsGa  pnotocatno- 
des)  ;  once  developed,  this  type  of  photocatnoae  could  be  inteqrated  in  an  unaqe  dissec¬ 
tor  tuoe. 

An  approach  solution  for  a  high  performance  CCD  solid  state  detector  star 
tracker  leads  to  tne  following  structure  : 

-  solid  state  detector,  witn  a  response  homogeneity  better  than  1  illuminated  from  th 
backside  and  t hermo-cont roi led  around  0“C  (profit  contribution  of  intensifier  tuoe  allow 
to  limit  dark  current  effect  oy  reducing  integration  time), 

-  solid  state  det ector- int ens i f ier  tube  coupling, 

-  low  aperture  optics  including  a  3  artificial  stars  optical  recal ibrat ion  system, 

which  objective  performances  in  space  environment  would  be  around  1/bOth  pixel, _ thus _ a 

lUOUJ  to  20000  f ield/accuracy  ratio. 


REFERENCES  GYROSCOPIQUES  POUR 
APPLICATIONS  SPATIALES 


par 

J.Resseguier  et  G.Monier' 
SAGEM 
B.P.5I 

9561  2  Cergy  Pontoise  Cedex 
France 


Dans  cette  communication  on  presente  d’abord  les  gyroscopes  SAGEM  disponibles  pour  les  applications  spatiale 
en  montrant  revolution  technologique  entre: 

Les  gyroscopes  tlottants; 

-  Les  gyroscopes  sec  accordes. 

Dans  chaque  type,  les  caracteristiques  essentielles  sont  commentees: 

-  Fiabilite  (MTBF) 

Stabilite  a  long  terme 
Bruit 

Consommation. 

On  deduit  ensuite  une  etude  de  redundance  theorique  et  experimentale  destinee  a  optimiser  I’organisation  d’un 
systeme  gyroscopique  a  senseurs  multiples. 

Enfin  est  presente  un  equipement  de  mesures  d’attitudes; 
a  composants  lies 

modulaire  con(;u  pour  equiper  un  satellite. 


li  lexte  integral  de  cetle  communication  est  piihlie  dans  la  publication  classifiee.  CP  .t.so  (Supplement). 
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^  SUMMARY 

Autonomous  spacecraft  control  and  data  processing 
have  recently  become  realizable  due  to  advanced  fault 
tolerant  techniques  coupled  with  the  development  of 
very  high  scale  integrated  circuits.  A  method  of  uti¬ 
lizing  present  integrated  circuit  componentry  with 
future  technology  insertion  has  been  developed  on  the 
FTSC  Program.  The  FTSC  is  designed  to  support  a  variety 
of  spaceborne  missions  with  a  95%  probability  of  surviv¬ 
ing,  unattended  and  without  degradation  in  performance, 
for  five  to  seven  years.  Besides  easing  the  ground 
station  scheduling  requirements,  this  capacity  increases 
the  overall  satellite  survivability. 

The  purpose  of  this  paper  is  to  present  a  concept 
of  achieving  the  survivability  by  the  utilization  of 
various  fault  tolerant  techniques.  ^JThese  concepts  of 
fault  tolerance,  as  well  as  techncflc^y  insertion,  are 
also  being  incorporated  in  the  Military  Computer  Family 
Program  currently  under  development  at  the  U.S.  Army's 
CECOM  Facility  at  Ft.  Monmouth,  New  Jersey,  U.S.A. 


The  Fault-Tolerant  Spaceborne  Computer  (FTSC)  is  a  general-purpose,  high-reli¬ 
ability,  radiation-hardened  digital  computer  designed  to  meet  the  Air  Force  on-board 
computational  and  survivability  requirements  of  the  1983-1993  time  frame.  The  FTSC 
IS  designed  to  support  a  variety  of  spaceborne  missions  with  a  95%  probability  of 
surviving,  unattended  and  without  degradation  in  performance,  for  five  to  seven  years. 

It  IS  capable  of  self-reconfiguration  and  resumption  of  computation  following  internal 
element  failures,  power  transients,  and  radiation  events.  With  these  features,  the 
FTSC  [provides  autonomous  spacecraft  control  via  on-board  programs,  as  opposed  to 
present  systems  which  require  excessive  ground  interaction.  Besides  easing  the  around 
station  scheduling  requirements,  tins  capability  increases  the  overall  satellite 
survivability.  The  basic  FTSC  characteristics  are  provided  in  Table  I.  As  the  table- 
shows,  tile  PTSC  also  has  outstanding  performance  characterist ics  as  a  computer.  This 
permits  very  accurate  attitude  control,  navigation,  and  guidance.  Since  i‘  can  bc 
repro<i rammed  to  accommodate  changing  mission  requirements,  the  FTSC  offers  a  hiah- 
dearee  of  on-orbit  flexibility  and  reduces  the  probability  of  early  <  )bs' -  n,.-.  ■ , 

A  system  block  diagram  of  the  FTSC  (Figure  1)  shows  the  computer  is  seqregatcd  into 
a  numbir  (jf  functional  elements,  with  each  element  p.rotected  by  at  least  one  .stare.  I  r. 
addition,  several  of  those  elements,  notably  the  memory  elements  an<!  the  address  and.  data 
buses,  are  provided  with  redundancy  at  the  sub-element  level  throuah  tli<  use  of  "i-ip;  1.  t  " 
switchi-s.  This  concept  greatly  reduces  the  redundant  hardware  tint  would  otlioiois'  bi 
required.  The  Configuration  Control  Unit  (which  is  the  ultim.ite  guaitii.in  of  tli- 
has  been  reduced  in  complexity  by  distribut  i  ng  much  o.f  its  funct  ion  to  (dher  Fi'se  -  li  m.  r.i 
llKih  fault-coverage  is  assured  ftiroual'.  exton;,ive  usi-  "f  coiiina,  an<!  s  i  no  I  o  -  on  i  n  t  lailuru 
mechanisms  l.ave  been  avoided  by,  amono  other  Ihing.s,  [lovidino  at  b  ast  two  :atlis  t  i  all 
critical  signals.  A  short  dose  r  i  ;.t  io,n  of  e.ich  of  ihi-  functional  eloan-nts  lollows. 
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•  TYPE: 

•  DATA  FORMATS: 


•  INSTRUCTIONS: 

•  ADDRESS  MODES: 


CHARACTERISTICS 

GENERAL  PURPOSE.  STORED  PROGRAM,  DIGITAL 
COMPUTER 
FIXED  POINT: 

32  BIT.  2  S  COMPLEMENT  INTEGER 
FLOATING  POINT: 

24  BIT.  2  S  COMPLEMENT  MANTISSA 
8  BIT,  2  S  COMPLEMENT  EXPONENT 
DOUBLE  PRECISION  FLOATING  POINT 
56  BIT.  2  S  COMPLEMENT  MANTISSA 
8  BIT,  2  S  COMPLEMENT  EXPONENT 
112.  INCLUDING.  INTEGER,  FLOATING  POINT  AND  VECTOR 
REGISTER  REGISTER 
IMMEDIATE 
UPPER  IMMEDIATE 
DIRECT 
INDIRECT 

INDEXED  POST  INCREMENT 
INDEXED  PRE  DECREMENT 
INDEXED  DIRECT 
INDEXED  INDIRECT 

CENTRAL  MICROPROGRAMMED  CONTROL  UNIT 
EIGHT  GENERAL  PURPOSE  32  BIT  REGISTERS  THAT  SERVE 
AS  ACCUMULATORS.  INDEX  REGISTERS.  OR  ADDRESS 
POINTERS 

EIGHT  WORKING  REGISTERS 
10  INTERRUPT  LEVELS 

UP  TO  61K  WORDS  OF  ADDRESSABLE  PROGRAM  MEMORY 

2  HIGH  SPEED  DMA  CHANNELS 

62  LOW  SPEED  CHANNELS  ON  A  SERIAL  BUS 

•  95%  PROBABILITY  OF  SURVIVAL  FOR  5  YEARS 
(UP  TO  7  YEARS  WITH  6  CPUs! 

•  NO  SINGLE  POINT  FAILURES 

•  RADIATION  HARD 

•  POWER  45  to  60  WATTS  1  DEPENDS  UPON 

•  WEIGHT  50  to  80  LBS  '  ' 

•  VOLUME  0  8to1.5FT> 


•  CONTROL: 

•  REGISTERS: 


•  INTERRUPTS: 

•  MEMORY: 

•  I/O 

•  SURVIVABILITY: 


•  PHYSICAL: 


MEMORY 
I  REQUIREMENTS 


ti 


iJlNTKAI,  I’KOCtSSI.N’i;  INIT  (CPL') 

The  CPU  implements  all  arithmetic  and  logical  op'erations  ieuuireci  to  process 
application  and  fault  recovery  programs.  There  are  four  CPU  modules  in  the  FISC,  two  of 
which  are  enabled  during  normal  operation.  (Note:  The  FTSC  may  accommodate  six  CPUs  for 
longer  life.)  One  of  the  enabled  CPUs  is  designatc’d  as  the  active  module,  tlic  other  as 
the  monitor.  Each  CPU  has  the  following  features: 

•  Executes  the  112  instructions  as  defined  in  Table  IV,  These 
instructions  are  performed  on  32-bit  data  words  and  include  integer, 
floating  point,  and  logical  operations. 

•  Nine  addressing  modes: 


Reg is ter- Reg is ter 

Immediate 

Upper  Immediate 

Direct 

Indirect 


Indexed,  Post-Increment 
Indexed,  Pre-Dccrcment 
Indexed 

Indexed,  Indirect 


•  Microprogrammed  using  an  internal  read-only  memory  (ROM) 

•  Eight  program  addressable  32-bit  general  purpose  registe.rs,  plus  an 
extension  register,  a  program  counter,  status  registers,  a  mer.ory 
address  register,  a  memory  data  register,  and  four  worlcing  registers. 

•  Capable  of  recognizing  and  processing  ten  internal  levels  of  interrupts. 

•  Incorporates  a  bus  arbiter  to  resolve  bus  access  conflicts  among  the 
CPU,  SIU  and  DMA. 

•  Capable  of  operating  in  either  of  two  modes:  active  or  monitor.  The 
active  CPU  provides  all  information  and  control  to  the  system;  the 
monitor  CPU  compares  the  outputs  from  the  active  CPU  with  those  it  would 
have  generated  if  it  were  the  active  CPU  and  reports  any  discrepancy  to 
the  Configuration  Control  Unit  (CCU) . 

•  A  2K  X  32-bit  reconfiguration  read-only  memory  (ROM)  which  contains  the 
reconfiguration  program.  This  program  is  initiated  in  response  to  a 
fault  interrupt. 

CONFICURATION  CONTROl.  UNIT  (CCU) 

The  CCU  has  the  capability  to  interrupt  the  CPU  whenever  a  fault  is  detected  and 
t'3 provide  sufficient  status  information  to  ensure  a  successful  reconfiguration.  There 
are  three  CCU  modules  in  the  FTSC  which  operate  in  a  triple-modular-redundant  (TMR) 
configuration.  Each  CCU  perfoiuis  the  following  functions: 

•  Cau.ses  the  fault  recovery  program  to  be  initiated  by  issuing  a  fault 
interrupt  to  the  CPt,'  whenever  a  failure  is  detected  by  one  or  more  of 
the  fault  detection  monitors.  (The  fault  interrupt  is  not  issued  if  the 
.specific  failure  <lotected  has  been  previously  masjted  under  program 

cent  ro 1 . ) 

•  Changes  the  CPU,  address  bus,  and/or  data  bus  configurations  whenever 

a  failure  indicates  that  such  a  change  is  necessary  to  effect  a  successful 
recovery . 

•  .Accepts  program  flag  inputs  from  the  CPU.  The  functions  performed  by 
these  flaas  include  itiasltin'i  Cirtain  types  of  faults  for  testing  and  for 
causing  the  CPU,  address  bus,  or  data  bus  states  to  be  changed. 

MEMORY  MOD'-EE  (MM) 

"itio  main  memory  in  tl'.i,-  ET.SC  is  composed  of  a  number  of  indepiendent  sem-i-con- 
!ucf';r  memory  mod  ’cs  each  with  a  capacity  of  40‘)6  words.  The  design  permits  ex:  ansior, 

I'-  24  .me'raory  modules,  15  of  whu'h  can  be  active,  -iirectly  addrcssabli-  nu-me-ry  (61,4  4  0  words) 
The  remaining  memory  moduli.'S  an  spares.  Eacii  memory  noduli-  provides: 

•  Random  access  :stoi.iMe  U  r  FTSC  prourar-s  and  data. 

•  A  word  size  e'f  41  luts,  consisting  ■  d  ts  active  lots  ■ind.  th.r'.i  spciTo 
lilts.  The  18  act  i--.  1j  1  t  s  m  ncis:  •  '  is  Ij  i  t  s  of  dat  .1  and  six  l■:t^;  oi  C'  ]■  . 


The  caiability  to-  ls  lect  '.tie  a  •tir-.-  and  s;are  liit-line  :.,s;t 
1 ,  roe  ram  control.  TO,  i  s  se  I  ec  •  i  .n  :  1  i  “s  to  all  w'l  ,r  1  s  i  :i  t  !.e  ; 
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•  The  ability  to  individually  write-protect  each  memory  subblock  under 
program  control.  (Each  memory  module  is  divided  into  four  subblocks 

of  1024  contiguous  locations  each.)  Any  attempt  to  store  into  a  write- 
protected  area  leaves  the  information  in  that  address  unchanged  and 
causes  a  fault. 

•  The  capability  of  detecting  multiple  bit  errors  using  the  6-bit  code  in 
each  word.  The  memory  can  also  correct  single  bit  errors  when  jjut  in  the 
error  correcting  mode  under  program  control. 

•  Activation  or  deactivation  under  program  control.  (Following  activation, 
a  memory  module  does  not  respond  to  read  or  write  operations  until  so 
directed  under  program  control.) 

SERIAL  DATA  BUS 

The  serial  data  bus  subsystem  allows  up  to  62  external  interfaces  to  the 
system.  The  serial  bus  is  controlled  by  the  Serial  Interface  Unit  (SIC)  and  is  connected 
to  the  peripherals  through  dual-redundant  Device  Interface  Units  (DIU) .  The  bus  is  a  uni¬ 
directional,  daisy-chain  system  with  dual-redundant  serial  links  between  each  contiguous 
pair  of  DIUs  along  the  bus. 

SERIAL  INTERFACE  UNIT  (SIU) 

The  FTSC  contains  two  SIU  modules  connected  in  a  dual-redundant  configuration. 
Only  one  SIU  is  active  at  a  time;  it  can  be  deactivated  and  the  other  activated  under  pro¬ 
gram  control  when  a  failure  is  detected.  Each  SIU  module  has  the  following  capabi 1 i t i ies : 

•  Transfer  blocks  of  words  between  the  serial  bus  and  main  memory  using 
a  direct-memory-access  capability. 

•  Sequentially  access  any  number  of  locations  in  a  program  specified  block 
(modulo)  of  memory.  It  fetches  a  word  from  each  address,  transmits  the 
word  over  the  serial  bus,  and  stores  the  returned  (possibly  modified)  word 
back  into  the  memory  location  from  which  it  was  fetched. 

•  Synchronize  the  initiation  of  a  block  transfer  with  the  real-time  interrupt 
(RTI).  (in  the  Immediate  Mode,  the  block  transfer  is  initiated  with  the 
next  transmitted  word.)  A  now  block  transfer  cannot  be  initiated  if  the 
SIU  is  already  in  the  process  of  transmitting  a  block. 

•  Generate  two  levels  of  interrupts:  an  end-of-block  interrupt  signalling 
the  completion  of  the  current  block  transfer,  and  a  high-priority  inter¬ 
rupt  indicating  peripheral  initiated  interrupts  or  a  failure  condition. 

DEVICE  INTERFACE  UNIT  (DIU) 

[,ow  speed  us'.'r  devices  are  connected  to  the  serial  bus  through  dual-redundant 
pairs  of  DIUs.  Both  DIUs  in  each  pair  arc  powered  at  all  times  by  the  peripheral  in  which 
they  are  locati-d.  Each  DIU  has  the  following  characteristics. 

•  Itansmit  or  receive  status  (command)  information  or  data  in  accordance 
witli  t)u'  np  CODE  field  of  only  tliosc  received  words  containing  its  unique 
pin  pro'-irammod  .address. 

•  Following  a  per i phe ra 1- in i t i a ted  interrput,  the  module  modifies  the  first 
available  serial  bu.s  word  to  indicate  an  interrupt  to  the  SIU  (unless  a 
b.iglur  pri'/rity  it.',,  i  '  a:  i  is  already  indicated  in  the  word).  The  Dll'  repeats 
the  inti-rrufU  every  tnird  real-time  interrupt  (RTI)  until  it  is  acknowledged. 

D I  R  i; CT'  M  EMO  R  V  AC C  K  S  S  _( D.M A ) 

Ttie  DMA  !  lovid.-s  j  high  sp'eid  parallel  interface  to  the  ETSC.  I'hcre  are  two 
dua  1  -  ri'dundant  pairs  ot  DMA  moduli;;  in  the  FTSC.  only  one  DMA  of  the  p.air  is  activated, 
while  the  other  act.s  .is  a  nonoperating  or  standby  sp.iie.  Either  can  be  activated  or  di.'- 
■  ictivated  under  f.rograni  cintrol.  Eacli  D.MA  module  is  ciijable  of  the  following: 

•  T r ans f e r r  1  m;  blocks  '■!  information,  without  Cpi  intervention,  directly 
from  iiny  active  memory  ri'.dule  to  the  peiiplural  'U  from  ;  tie  ji  ri;hi.'ral 
to  memory. 

•  Passes  on  commands  sent  by  tin-  Ui'''  to  control  t  lie  leriil.etal. 

•  generate;,  two  levels  ol  inleirupt;,:  an  end -o  f  - 1, .ek  i  r.  t  ■  rrui!  sianailir.  : 
the  completion  of  the-  current  bl  a'k  tran.eler,  .ir.  i  a  lii  :l';-pi  loi  ity  int'O  tin  t 
indicating  a  ; -er  i  plier  a  1  -  i  n  i  t  i  a  t  ed  inlerru!t  or  a  ia;lur'  c  iriUiit  i  n. 


TIMING  UNIT  (;nj) 

The  Timing  Unit  consists  of  two  powered  Timir.r:  Modules  in  a  dua  1  - redundar. t 
configuration.  One  module  is  active,  while  the  ether  serves  as  a  standby  spare.  tact. 
Timing  Module  has  the  following  features: 

•  When  active,  it  generates  a  system  clock  at  a  frequency  of  2.5  MUz . 

•  When  active,  it  generates  a  real-time  interrupt  (RTI)  every  4.4032  ms. 
Capability  is  provided  to  decrease  this  period  by  a  factor  of  2  or  to 
increase  it  by  a  factor  of  2  or  4. 

•  Provides  dual  status  signals  to  other  FTSC  modules  to  indicate  its 
active/standby  state. 

•  Contains  dual  monitors  to  check  its  system  clock  and  internal  real-time 
interrupt  outputs.  If  an  out-of-tolcrance  condition  is  detected,  the 
defective  Timing  Module  enters  the  standby  state  and  the  other  Timing 
Module  takes  over  the  active  role. 

POWER  UNIT  (PU) 

The  Power  Unit  consists  of  two  Power  Modules  connected  in  a  dual -redundant 
configuration.  One  module  is  active  while  the  other  serves  as  a  standby  spare.  Each 
Power  Module  convert's  the  primary  power  input  to  the  internal  levels  required.  Each 
Power  Module  has  the  following  capabilities: 

•  When  active  it  provides  the  internal  voltages  required  by  the  FTSC. 

•  Provides  dual  status  signals  to  the  other  FTSC  modules  to  indicate  its 
active/standby  state. 

•  Contains  dual  monitors  to  examine  its  output  voltage  levels.  If  an  out- 
of-tolerance  condition  is  detected,  the  defective  Power  Module  enters  the 
standby  state  and  the  other  Power  Module  takes  over  the  active  role. 

CIRCUMVENTION  UNIT  (CU) 

The  Circumvention  Unit  is  designed  to  protect  the  FTSC  during  radiation  events 
and  power  interruf^tions  by  clamping  all  memory,  DMA,  and  SIU  modules.  There  arc  three 
Circumvention  .Modules  in  the  FTSC  operating  in  a  triple-module-redundant  (TMR)  config¬ 
uration.  Each  Cl rcumvent ion  Module  has  the  following  characteristics: 

•  Can  accept  inputs  from  distributed  radiation  detectors. 

•  .Monitors  for  the  status  signals  indicating  out-of-tolerance  power  conditions 

•  During  the  period  following  detection  of  radiation  or  power  out-of -tol eranco 
conditions,  generates  clamp  signals  which  inhibit  all  I/O  and  prevent  memory 
contents  from  being  changed. 

HARDENED  TIME  (HT) 

The  Hardened  Timer  keeps  track  of  real  time  during  radiation  events,  power 
module  failures,  timing  module  leilures,  and  reconfiguration.  There  are  three  Hardened 
Timer  Modules  in  the  FTSC  operating  in  a  triple-modular-redundant  (TMKI  configuration. 

Each  Hardened  Timer  Module  is  capable  of  the  followin<!: 

•  Being  activated  upon  the  occurrence  of  a  radiation  i-vent  ,  a  tower  failure, 

1  t  irnin;  failure,  or  the  dotectior;  q  any  u:::- a.ske,;  :  a  i  i o'  . 

•  Accumulating  the  number  of  real-time  interrui'ts  ( R i  i  wnie'K  occur  .lurina 
the  time  in  which  the  timer  is  active. 

•  Reading  and  resetting  the  accumulated  I  i.mi.  cont'-nt  a  utri'  j  :  r'  eTam  c  t.t  tf  i  . 

•  Accuitiu  1  a 1 1  n  :  elapsed  time. 

INS  IR'  CT  I'  IN  f  ■  'RUMAI 

The  FTSC  instruction  format  ciainists  iit’"  f;.l  is;  o;  ■  y:  ^  ti.^  to,  ^  te 

ADDRESS.  the  '■  I'  C’lD!.  t'leli  identifies  'he  instruct  lo.n  t  ■  Ije  '■>:•. cute  :!.■  R ;  :  . 

ties  one  ol  the  el  if.t  oeneral-;  urpose  reiisler'-  used  as  an  ■  leiand  i  :■  o‘  ;r.at  n  ;•  :::■•■'!  . 
The  RA  field  si'/Cifies  one  of  the  same  set  e- f  ei  :ht  Tier  a  1 t.  r ;  ■  te  ;  i  .  >;  .;o  :  : in 

address  intlex,  operand  or  destination  reuisler.  ''he  .-VM  rod  i  .aici'  i'O.  ti.i  ad.;:'  :  :•  ;• 

be  used  in  definind  the  effective  address  (eai  r  ir  the'  ii.-efoict  o  .  T.ildi  !1  :  ;  :o  :  ‘ 

Operation  of  each  address  mode  and  thi--  ca  1  cu  1  a  t  i  ot.  ■'(  ta  ;  ;t  'eic;.  do  ;•  :d,';s  i  :  1 

and  OP2)  have  been  defined  to  identify  th.e  ■!  i  f  f  i  ■  n.-nce  amon  ;  •  is-  m  ;  -r  ;■ 

structions.  For  fetch-ty;..e  instruction::  in  whicn  t  1,.  ;  s  n-  t  o.e;';'  ;  :  :■ 

modified,  th.e  contt:nt  rjf  rp,  will  lie  rid-la'a  d  i.y  ■'■Id.  Ti-.e  .ADDR:  :-.S  r  od  :  .  uo.d  in  ;•■:  :  i  : 
th.'  ea  for  modes  1-7  and  the  address  sr.e-cifio'd  is  d.-es  i- unit  •  i  ",i"  ; ;!.,■  a;!:,  s  :■  n  :  i;  !■  . 


OPfOlir  RB  RA  AM  ADDRFSS 


'•  UP  If  u  r>  II. 


HELD 
OP  CODE 
RB 


BITS 


MEANING 


RA 

AM 

ADDRESS 


0  6  Operation  code 

7  9  Specifies  one  of  8  opp'^and/ 

destination  registers 
10- 12  Specifies  one  of  8  index/ 

operand/destination  registeis 
13-15  Specifies  address  mode 

16-31  Specifies  operand  or  address 


C  AOORESS  MOOES  ^ 


OP  Instruc- 

Address  CODE  tion  Operand 

Mode  MSB  Description  Type  Rules* 


0 

0 

Register- 

Register 

Fetch 

DPI  =»(r,l  =  leal 

OP2  =  lr„) 

1 

0 

Immediate 

Fetch 

DPI  =  sign  extended 
a  =  leal 

OP2  =  Ir.) 

1 

1 

Upper- 

Immediate 

Fetch 

OP1=ax2'*=leal 

OP2=lr,) 

2 

0 

Direct 

Fetch 

OP1  =  (al  =  leal 

OP2  =  (r.) 

3 

0 

Indiiect 

Fetch 

OP1  =  lla»  =  l8a) 
OP2=lr.) 

4 

0 

indexed. 

Post¬ 

increment 

Fetch 

OP1  =  (a  -r  Ir,))  =  lea) 
OP2=lr„) 

(r.)-lr.)  -r  1 

5 

0 

Indexed, 

Pre¬ 

decrement 

Fetch 

(r.)*-(r.)-1 

OP1  =  (a-r|r.))  =  |ea) 
OP2=(r.) 

6 

0 

Indexed 

Fetch 

DPI  =  la -Hr.)  )  =  lea) 
OP2=lr.) 

7 

0 

Indexed, 

Indirect 

Fetch 

0P1  =  lla-Hr,)))  =  lea) 
OP2  =  lr„) 

0 

1 

Register- 

Register 

Store 

r,=  ea 

2 

1 

Direct 

Store 

a  -  ea 

3 

1 

Indirect 

Store 

(al  =  ea 

4 

1 

Indexed, 

Post 

increment 

Store 

a  +  Ir,)  =  ea 

Ir,)*  lr,)-r  1 

5 

1 

Indexed, 

Pre¬ 

decrement 

Store 

(t.)*-  Ir.)  -  1 
a  +  Ir,)  =  ea 

6 

1 

Indexed 

Store 

a  +  'f.)  =  ea 

7 

1 

Indexed, 

Indirect 

Store 

(a  +  Ir,))  =  ea 

VX>  =  th0  content  of  X  ^ 

Table  II 


DATA  FORMATS 


f--.' 


The  logical  data,  inti’qiT  data,  floating-point  data,  immediate  data,  i 
immediate  data,  doublc-pr<:'Cisif,>n  f  1  on  t  i  na-r -oi  n  t  data  and  {>rogram  status  w-irds  .u  . 
this  Figure. 


Immediate  Data  (IM) 


Immediate  numb<;i's  ir 


or  integer  data. 

r  mmu'd  1  a  t na  ta  ( ! '  i  M I 


0 

15 

16 

31 

expended 

number 

u  r  *  •  M  ‘  a  t  •  mI  as 
\  t  o  mocii'  1  nst  riK 
t  lie  <.'onput  at  Ion 

1  (j-bl  L  1  ntcH 
*t  I  ons  to  t  fi* 
Imnoti  1  at  o 

j.-t  s  . 

■  npi-. 
numlii 

svpn 
r  1  6  1 1 1  t  s 
rs  nay  Iji; 

n 

1* 

n 

'■’jmber 

/pros 

rl  1  U»  ■ 

th- 


I  r  f  ‘  •  t  -  1  mmod  1 .1 1  ( •  numbers  are  tr*aiei,l  as  1  bit,  . 
tl'.e  instruction  .uddress  field  is  mu  i  t  i  f  ■  1  i  -  :  by 
iitatou'..  ■  t  f  - '  r  -  1  aimed  1  it  te  numbers  nay  b<'  used  as  U 


■  '-'U  1  ir  ■ 


rycr- 
■.  1 '  O'  i  n 


1.'  S  b  l  l 

the  VO 
'  g  1  c  a  1 


:  s  •  d  111 
It  1  IM- 


s  1 


Double-Precision  Floating -Point  Data  IDPr) 

High-Order  Word  Low-Order  Word 

0 _ 23  24  n  0 _ ^ 

mantissa  exponent  low-order  mantissa 

The  high-order  word  of  louble-precision  floating-point  r.u.-.Li-rs  has  a 
complement  normalized,  fractional  m.antissa  and  an  8-bit  2's  comT.lcmi;  n  t  exponent, 
order  word  is  a  32-bit  continuation  of  the  high-order  mantissa. 

Logical  Data  (L) 


All  bits  are  treated  identically 
Data  (I) 


Integers  are  represented  in  a  32-bit,  2's  complement  form 


Floating-Po_int  Data  ) 


Floating-point  numbers  have  24-bit,  2's  complement,  normalized  fractional 
Tianti.s.sa  and  an  8-bit,  2's  complement  exponents. 


.■XI  oi.ent  . 


A  floating-point  zero  is  represent --d  by  an  all  zero  mantissa  and  an  80  (hex) 


INSTHleTInN  SLT 


The  FTSe  ha.s  a  comprehensive  and  flexible  instruction  set  which  contains  both 
inte.'er  and  f  loat  i  n'g-|  o  i  r.  t  computational  instructions. 

The  instr.i  •  .on  algorithms,  and  the  cent  ra  1 -process  inq  unit  hardwari' ,  are  de- 
sii  jneii  t'_  ;.  rovido  .max.  execution  s[..eed  for  a  c..)miuter  which  has  very  low  average  (.li.-c 
trical  power  consumption. 

A.ru.uig  the  1  n  s  t  rue  t  i  o.-.s  in  the  n-p-ertoire  are  many  that  substantially  redueo.. 
tile  execution  ti.me'  <.>f  a;  p  I  i  cat  i  e.n  pr.-, grama  winch  are  typ-ical  of  si-acecraft  and  satellite' 
■■  1  as  i-.g'.s .  The  instruclir.r.  format  allows  for  u;  to  128  instructions,  ei  f  which  11.1  h.a'.'e 
ooen  .sfocitie,!  f.,.r  the'  FI'S''.  Th.s,  .ilong  with  l-addross  r.odies,  provi'i'-s  a  iughi  ;!■  "iio' 
f  1  • 'X  1 1. 1  1  1  ty  foi  the  :  r  og  rimme  r  . 

As  the  ceimiuteT  IS  primarily  inteneie!  for  :t  icelx.rne  iui-ianco_  n.c.';  lot  o  n  an'l 

sa t ■ '  1  !  ;  t  e  ma n  1'  ;i  TT!'  'n t  f  unc  t  i  ■  -  n ,  s;  'o.- 1  a i  •  'p;  s.is  i  s  has  he. -n  made  t  ■ .  i  ro v  i  h  C'  :■  i  ■  1  o  t  •  ■  oo ' 

.)  f  a  r  I  f  hme' t  1  c  ope  r a  t  1  ocis  .  r  j;  i  n t , ■  r  f  i  xee! -  ;  • ; :  n  t  an  - i  f  rac !  i  ona  1  :  o  ,i  ‘  i  n  i  -  ;  >  :  n  t  i  n  s  t  no 

t  1  on  s  i  r  •  ■  ;  ro'.'  1  df  !  .  Ad'  i  i  t  ;  oi  l  1  . .  'og  ;  s  dor  i  fed  f  i  :i;  ^ieub  1  ■  - :  i  '  -c  i  s  i  ■  f  1  oa  i  i  : - :  ■  ■ ;  n  > 

K.e  t  1 ;  1  ■  n  s  .1  nd  ,  i  -  ,i  .  ■  r  a  I  i  ■  >ns  .  T  h-  ■  I  1  o.i  t  i  n  i  -  :  ■  i  n  t  vi  t  o  r  ■!  e  t  ,  1 1  i  •  ns  i  ne  1  o  ;.  t  ;  :  ■  .e. 


1 


Table  III 


TYPICAL 

INSTPUCTIOIM  EXECUTION  TIMES 


INSTRUCTION 


EXECUTION  TIME 


Direct  Mode  (21 

STORE  register  2  8,j 

LOAD  REGISTER  2  8 

JUMP  32 

AND  LOGICAL  2  8 

ADD  INTEGER  2  8 

ADD  FLOATING  8  0 

MULTIPLY  INTEGER  116 

MULTIPLY  FLOATING  10  4 

SHORT  DIVIDEND  DIVIDE  INTEGER  16  0 

DIVIDE  FLOATING  17  2 

SQUARE  ROOT  FLOATING  52  0 

VECTOR  INNER  PRODUCT  FLOATING  46  4 

ARITHMETIC  LONG  SHIFT  (10  BITS  RIGHTi  7.6 

Register-Regietet  Mode  (0) 

LOAD  REGISTER  16 

ADD  INTEGER  1.6 

ADD  FLOATING  6  8 


FTSC  INSTRUCTION  SET 


LOAD/STORE 


TEST  AND  SKIP 


‘>1  4IJ'  icfo 

Lo«ft  EtteciXKX' 

load  Wotfc'Og  WO 

I.  laO  WorXng  Rrq  ^IRr  Wl' 

Lnad  Wotfc'ttg  'W?' 

Load  Wo'Xit'g  Pagnte'  W3i 
load  Arirve  Ofiv 


INTEGER,  ARITHMETIC 


Slot*  /ifro 
Sforp  ;*•«<(  Dyt.ia. 

StO'*  {.U»r-V'>o  Pl»g.\1 

St«,<a  PSW 
Sf.tra  PSW 


.•  (I  V  d  :  .  i»»  ■ 

.  •  •  -4  ti  .dP'  1  dP  ' 


FLOATING  POINT  ARITHMETIC 


logical 


»  •  J 

1 


••  /i-  je- 

/P . •'JP- 

S  •  . .  J.- 


shift  ROTATE 


I  -•J 


MISCELLANEOUS 


»  • 


i'ht.,'  FTSC  hcis  a  surtwaro  j.ackaao  Lla'-  do'/c  I-.j:  T.if -rLt  d  ! 

.T.atched  by  few  comijuters  in  its  class.  Trie  ;.'ack.aa^-  contains  tiin'-.-  .■  . 
system,  a  simulator,  debuycinq  aids,  diaqnoslic  tr'ocrams,  a  tai  1 1  i  - 1  a:, 
output  handlers  and  a  mathematical  suns  u;  :n-;  teickaite. 


Compi  let's 

•  JOVIAL  073/1 

•  FOR'IRA.N 

•  SPl. 

■A  1  compilers  output  symbolic  assembly  lantiuace  and  aia- 
quired  functions  such  as  rollback  insertion  and  dupl.'X  iata  steci; 

Assembler  System 


language  programs. 

Assembler  -  .Accepts  FTSO  symbolic  assembly  lanuuaae  and  :  roduci  e 
ob]ect  text  and  source  Irstintis  with  features  such  as  external  Fyrijo  1 
Entry  Point  Symbols  list.  Cross  .Reference  list.  Instructions  ised  list 
Segment  Description  maps. 

Linkage  Editor  -  Links  together  separately  asseimbled  relocaiaiile  out;./, 
produced  by  the  asse.mbler  and  produces  a  "load  module."  Featureos  '.'Xter 
inputs  analysis  and  utili/os  by  option  either  first  fit  or  be.st  fit 
algorithms  for  efficient  memory  management.  Outputs  detailed  memory  ut 
tion  maps. 


Simulator  Svstem 


FTSSI.M-  .An  interpretive  F'ISC  simulator  with  advanct.-d  debu/i  catabil'.ty 
include.s  L'P';  function.-;,  CCd  functions,  DMA  functions  and  memo  i  y  fur.cti; 
It  IS  written  in  Pascal  and  i.s  higlily  transportable. 


Lo.idi' r-P  ro'i  t  am  used  l,j  formtat  the  load  modules  i  rt/duced  iiy  tiv  linkao. 
edi‘or  int:;  the-  vari.iui;  form.ats  roc.  ui  red.  by  the  simulator  uni  t:.-/  iTSC 
loi  r  iwa  r  e  . 


i'’'st  Cat  ;  n  -  'Hr.  Aut.  m.Ue:  F'l  Sd  I.-rt  . 
d  th  t' L- '..I ;p  so-r;-  s  C:  :’;p.uti..-rs  ‘e-i- 

:u.'  fd'h;  IS  also  1  n  t ' '  r  !  aC' i  v/:t.h  th--  F'l  Si 


m  la  I'DP-l  1  .sy.stom)  ' 

'  tile  transfer  o'.  FTSC  itadable 
s'  .-n  DMA,  DIF  and  Control  Panel 
in  leadin;  an-.!  c;  :;t  ro  1  1  .  rv.i  FTSC 


I  ; ;  m  r:i  ,  s  . 


'1  ;e:.;  duel;  Itoilures  as 


Kilch  of  the  dual  DILis  providos  a  24-bit  parallel  FTSC  interface  for  the 
iripheral  device  with  whicl:  it  is  associated.  The  peripheral  must  provide  power  and 
luse  each  DIL'  of  its  associated  pair.  Each  DIU  monitors  two  serial  data  bus  lines, 
thouq!'.  It  actively  processes  data  received  on  only  one  of  the  two.  The  DIU  monitors 
e  S(,'lectcd  bus  for  faulty  bus  transmissions  and  switches  to  the  alternate  bus,  if  a 
ult  condition  is  present  on  that  bus.  Relays  are  provided  for  by-f->assinq  ’  DIU  pair 
lOuld  the  associated  peripheral  lose  power. 

Each  DIt  transmits  or  receives  status /command  information  or  data  as  specifi 
the  or  CODE  field  of  the  serial  bus  word.  (The  serial  bus  word  format  is  shown  belo 
the  address  field  of  each  serial  word  is  shifted  into  the  DIU,  each  bit  is  tested  to 
termine  if  it  is  consistent  with  the  DIUs  pin-prou rammed  address.  When,  the  DIU  detec 
s  own  address,  it  performs  the  followinci: 

•  If  tile  OP  CODE  indicates  receive  messace  and  the  DIU  is  able  to 
accent  the  messaue.  tne  mossacie  is  sent  t.o  the  ner lijhera  1  . 


The  request  line  is  raised  by  the  DIU  to  initiate  a  transfer  to  or  from  tiie 
peripheral.  When  this  line  is  raised,  the  peripheral  must  act  u[jon  the  current  state  of 
the  other  control  lines. 

The  Read/Write  line  indicates  the  direction  of  the  transfer  over  the  Dll,/ 
Peripheral  interface.  The  line  is  set  to  the  high  state  when  the  transfer  is  from  tl.e 
peripheral  to  the  DID  and  the  lino  is  set  low  when  information  is  to  be  transmitted  from 
the  DIU  to  the  peripheral. 

The  Command/Data  line  enables  the  peripheral  to  distinguish  between  comjnand. 
status  information  and  data.  If  this  line  is  in  the  high  state,  information  transferred 
from  the  DIU  to  the  peripheral,  and  to  the  DIU  from  the  peripheral,  is  defined  as  cr)iTima!'.d 
and  status,  respectively.  If  the  line  is  at  the  low  state,  information  transferred  in 
either  direction  is  defined  as  data. 

The  Acknowledge  line  is  set  high  by  the  peripheral,  in  response  to  a  DIU  request, 
after  the  peripheral  has  either  1)  gated  data  or  status  onto  the  data  lines  (Read/Write 
set  high),  or  2)  latched  the  data  or  command  present  on  the  data  lines  (Read/Write  set  low) . 

For  peripheral  initiated  transfers,  the  Interrupt  line  is  set  high  by  the 
peripheral.  In  response  to  the  interrupt,  the  DIU  set  the  Command/Data  and  Rcad/Wrlte 
lines  high  and  then  raises  the  Request  line.  The  peripheral  must  then  raise  the  Acknowl¬ 
edge  line  and  clear  the  Interrupt  to  indicate  to  the  DIU  that  the  device  status  has  boon 
gated  onto  Die  data  lines. 

Use  of  error  code  is  optional.  If  the  ignore  error  code  li.ne  is  statically  set 
low  by  the  peripheral  the  error  code  must  be  appended  to  each  word  transferred  over  the 
Diu/peripheral  interface.  In  this  case  each  word  transferred  will  contain  the  16  messaao 
bits  of  the  serial  bus  word  appended  with  eight  code  bits.  The  code  transferred  across 
the  DIU/Peripheral  interface  assumes  a  32  bit  word  containing  zeros  in  bit  positions  0-15 
(most  significant  16  bits)  and  the  data  contained  on  the  data  lines,  in  bit  positions  16-31. 
The  code  bits  are  determined  by  a  shortened  cyclic  code  structure  which  is  defined  by  the 
generator  polynomial,  q(x)  =  (x^  +  x  +  1)  (x2  +  x  1) .  When  the  lino  is  in  the  high  state, 

error  code  is  not  used  during  any  transfers.  For  this  case,  the  least  significant  eight 
data  lines  are  not  used. 

As  described,  each  DIU  function  consists  of  two  powered  DIU  modules,  one  of  which 
shall  be  on-line  in  the  current  configuration  of  the  serial  data  bus.  The  user  may  employ 
one  peripheral  attached  to  both  DIU  modules  with  monitoring  to  determine  which  DLL'  modulo 
is  on-line  and/or  the  ability  to  accept  a  switch-over  command  from  either  DIU  modulo.  The 
user  may  also  have  two  peripherals,  one  attached  to  each  of  thi-  DIU  modules  or  they  may  be 
cross-strapped.  The  DIU  function  will  prosorvo  error  code  bits,  if  provided  by  the 
user,  or  w.ill  append  them,  if  not  provided  by  the  user,  before  it  sends  any  information 
over  the  serial  data  bus.  The  error  code  will  bo  the  8-bit  code  defined  previously.  The 
user  has  the  responsibility  of  providing  error  detection  for  bad  or  missing  output  from  the 
DIU  modules.  On  detection  of  either  of  those  conditions,  the  user  can  switch  to  the 
alternate  DIU  and  produce  a  device  interrupt.  It  can  also  cease  to  resi.qind  to  further 
inputs.  Should  this  occur,  the  FTSC  can  diitect  the  state  through  software  timers  wliich  car. 
be  provided  in  the  specific  device  handling  programs. 

As  pri.iViously  described,  the  DIU  pair  is  houscu  in  the  peripheral  facilities 
which  .must  accom.modate  both  the  dua  1 -redundant  serial  bus  link  and  the  dual-24  bit  parallel 
1  n  te  r  f  aces . 

The  niU/Perip'heral  iiarallel  interface  signals  are:  low  locjic  state  or  data  '.-alue 
0,  [)V  i  1  -UV;  high  logic  .state  or  data  value  1,  lOV+1  .OV.  The:  interfacinfj  dei’ice  sliall  iiro- 
sent  an  im.pedance  of  at  U.’nst  lOCK  ohms  and  at  most  50  pf.  Its  Vooic  thresh.old  sl'.all  be 
between  4V  and  IV.  It  shall  be  able  to  drivi;  into  an  FTSC  input  imiodance  of  lOK  oh.ms 
50  pf.  Transitions  between  logic  level.s  must  be  U'.s.s  than  200  n.scc. 


and 


DIRECT  MEMORY  ACCESS  COMAI 


Each  Direct  Memory  Access  (DMA)  function  provides  an  external  user  with  a  high¬ 
speed  dual-redundant  direct  channel  to  the  FTSC  Main  Memory.  The  DMA  functions  are  program 
controlled  and  are  capable  of  transferring  bloc)cs  of  data  consisting  of  ud  to  4096  words 
from  or  to  a  specified  Memory  Module.  Prior  to  a  data  transfer,  the  selected  DMA  is 
provided  with  a  start-address,  a  stop-address,  and  an  indication  of  data  flow  direction. 

The  start-address  is  incremented  each  time  a  data  word  is  transferred.  When  the  incre¬ 
mented  start-address  equals  the  stop-address,  the  DMA  ceases  data  transmission  and  raises 
an  end-of-block  interrupt  to  the  CPU.  User  interrupts  arc  signalled  to  the  CPU  via  the  DMA. 

Data  transfers  between  the  DMA  and  its  associated  peripheral  are  effected  using 
eight  (8)  Transmit  Data  lines,  eight  (8)  Receive  Data  lines,  six  (6)  handshalce  control  lines 
and  one  (1)  static  control  line.  Four  of  the  control  lines  emanate  from  the  DMA:  Request, 
Read/Write,  Command/Data,  Word  Sync;  and  throe  from  the  peripheral:  Device  Interrupt, 
Acknowledge  and  Ignore  Error  Code. 

The  Request  line  is  raised  by  the  DMA  to  initiate  a  transfer  to  or  from  the 
peripheral.  When  this  line  is  raised,  the  peripheral  must  act  upon  the  current  state  of 
the  other  control  lines. 

The  Rcad/Write  lino  controls  the  direction  of  the  transfer  over  the  DMA/Periph- 
oral  interface.  The  line  is  set  to  the  high  state  when  the  transfer  is  from  the  peripheral 
to  the  DMA  and  the  line  is  set  low  when  information  is  to  be  transmitted  from  the  DMA 
to  the  peripheral. 

The  Command/Data  line  enables  the  peripheral  to  distinguish  between  command/ 
status  information  and  data.  If  this  line  is  in  the  high  state,  information  transferred 
from  the  DMA  to  the  peripheral,  and  to  the  DMA  from  the  peripheral,  is  defined  as  command 
and  status,  respectively.  If  the  line  is  at  the  low'  state,  information  transferred  in 
cither  direction  is  defined  as  data. 

Information  sent  between  a  perip'hiTal  and  the  DMA  is  transmitted  as  8-bit  bytes. 
Five  consecutive  byte  transfers  are  required  to  define  a  40-bit  data  bus  word.  Word 
synchron 1  ,'ation  is  accomplished  by  the  DMA  setting  the  Word  Sync  control  line  high  durinu 
the  transfer  of  the  most  significant  byte  (which  is  always  transferred  first) . 

The  fifth  byte  transfer  consists  of  the  error  code  ptirtion  of  thi*  bus  word, 
provided  that  the  Ignore  Error  Code  line  is  sot  low.  If  the  perifjhi'ral  user  has  selected 
not  to  append  error  code  r;n  data  transfers  across  the  DMA/ Pct  i  p-hcra  1  interface,  the  Ignore 
H:‘roi'  Code  line  will  !je  set  high  and  the  fifth  liyte  transfer  shall  not  be  exercised. 

j  III'  e'vclic  code  used  is  tliat  defined  liy  tin  generator  ijolyr.omia  1  ,  <i(x)  - 

(x  t  X  *1)  (x"  *  X  1)  .  When  tile  i 'i' r  1  [jbera  1  is  iirovidinri  error  codi- ,  code  bits  will 
be'  apg.endi-d  to  rlata  '■•.•'oivis  transferred  to  and  from  the  user  ( t  lie  DM<'\  jiasses  t  hC'  code  with 
the  words  received  :  rom  the  internal  l-'TSC  lius  to  the  usit).  If  the-  user  is  ned  providimi 

t):e  cofie,  the-  DMA  gene  f.-j  t  es  code-  on  t  );e  words  as  tliey  are  tran.sferred  into  the  I-'TSC  across 

I  tie  in  t  e  r  ;  1C-  ■ . 

1  tile  1JM,\  initiates  a  transfer,  it  raises  the  IJe-iuest  line.  If  the-  Rea-l/ 

let  high,  the  pe- r  i  p-hi  ■  ra  1  ilaces.  its  -lata  oi-  status  on  tile  receive-  data  lines 

s -w- 1  - -d<(<  - .  If  the-  Read  ,'Wr  1  t '  ■  line  is  S'-t  biw,  the  perip'in-ral  ace'e-pt  s  the-  d.ita 

ler.t  -Hi  th-j  tiansmit  -lat.a  lines  l;e-fote  it  raises  ,ackno'w  1  -  d-ie . 

i;  the  p-  r  1  p-h' '  rsa  1  re-ruir-s  ser'.'i-*-',  if  rais--;-:  the  D'-vice  Inteirupt  line.  In 
r- -s  I -or.  s- ■ ,  tia-  DMA  sets  thi-  Comma  n-l,  Plata  an-l  Ri-ad/Wi  ito  line-  h.  i -.'ll  aiie!  t  lien  initiates  t  he 
b'/t'-  tran.gfe-r  si-gtienc--.  I'he  D.MA  i-iises  Fe-iue-si  i-ri')!-  t-i  ■  acli  b-.-t--  (ransfi-r  anei  wails  for 
an  aek  11'  w  I  ed'K  ■  b-ifore-  oroceeding.  Word  S'/nc  is  set.  liicli  -iurinu  I  la  first  liyti-  transfer 


A  ra.i 

Wr  1  t  e  1  1  no-  1  s 
u-ai  raises  Ack 
or  c'lmm.ind  en- 


;1U'  ;■  Ibv  i  ij  McSi  i;:','-;  sui'.':  S'.-r  1 1'.  t  <j  r  r  u:- t  s  aii-  nut  Ki;  r  v  i  cu' I  until  al. 

lliitiatfU  wi.i  t  tain  M  !  I  -  r  a  i.avi-  n.-.,-;;  u  :  1  ■  ■  t ,  a  .  if,  tu,  casu  u !'  a  Lransfur  tu'fru:'.  t  hu 
uxtf:rn.il  i.tta  nuiu  '-luh  l>yt!'  tin  >;,.i  i  :':unL  l-f  t  tans  tur  rut:  :  I’loi’  to  uu  r  u  i  c;  i  r:  i;  in 

1  n  L  f -■  r  r  in  t  . 

nac.n  t  hu  tua  DMA  lunut  luns  uur.ni.st  ut  an  active  "lodule  anti  an  inactive; 

standby  e!u!u.  aui-!'  .-tay  uni:  l-,y  i,;;.-  i.'U  r  i  i,h,  tna  1  attached  to  both.  D.MA  niodulcu  v.'ilh, 

monituiin.;  tu  :ie' t  u  r:e  i  n,  wi.ic!;  LJ.M.A  aieiiuli-  i ;;  up.-line  arai/Or  the  ability  to  accent  sviitci 
ovei  curtTan  :  :  t  ut.  ui  d.M.A  mudule.  'li.u  user  piay  also  have  two  re  r  i  riher  a  1  s  ,  one  attacra 

tu,  each  ul  the  dm.A  iaju.;  ttny  ::iay  be  cruss-strarioed  . 

It-  a  1  ;  1  t  1  in  i-i  t  .he  c-introl  and  .Data  lines,  each  DMA  provid.es  a  cltick  lira,  for 
us<,  by  t!iu  .  rnal  'iivii-.-.  yh.u  clock  freaueiicv  is  the  san.  as  that  of  trie  internal  FT.Si 
cluck. 

;  wu  nei  lyiieral  interface  ontiuns  ai'e  available.  When  the  FT.SC  and  then  neri:.!., 
ei-il  ire  inuch.an  i  c.i  1  1  y  continuous,  standard  loq  levels  will  be  utilized  at  the  interface; 
bow  bi,(ic  state  oi  datii  value  J ,  a'.’tl.OV;  .hiqh.  Joqic  state  or  data  value  i,  1  hVi  1  .  C'V' . 
rile  ;nter:acinq  ievice  sliall  niesi-nt  an  impedance  o!'  at  least  lOOK  ohms  and  at  most  fO  re 
It--,  lui'jic  ih.resh.old  shall  be  between  4V  and  7V.  It  shall  be  able  to  drive  into  an  FTSC 
in:  uL  im;  uuiance  u  1  1  u.K  rahits  and  10  pf.  Tiansitions  between  lopiic  levels  shall  be  less 

than  .nsi‘C. 

W'tiere  the  |  er  1  nhera  I  -  user  is  located  remotely  from  tlie  FTSC,  a  special  inter¬ 
face  in  u.-o  ,1  which  provides  isolation. 

RbCOVKKY  CHARACTERISTIC S 

Fault  recovery,  t.he  resumption  of.  normal  pirocessinq  followincj  the  dctectiori  o: 
a  hiardware  failure,  is  accomplished  by  the  complementary  actions  of  dedicated  hardware, 
a  rcc.jvery  procjram  and  program  rollback. 

'the  recovery  program  constitutes  the  "brain”  of  the  recovery  system.  It 
carries  out  the  fault  diagnosis  and  reconfiguration  strategies.  The  performance  of  the 
FTSC  fault  recovery  system  depends  mainly  on  the  recovery  program:  its  features,  i  i 
stratoiiies,  its  implementation. 

There  are  seven  basic  steps  to  recovery.  They  arc: 

1.  Initial  Fault  Diagnosis 

2.  Identify  Faulty  Modulo 

i.  Determine  Reconfiguration  Strategy 

4.  Perform  tlie  Reconfiguration 

1.  Condition  the  now  lilement 

6.  Recover  blapsed  Time 

7.  Rollback  Application  Program.! 

Steps  1,  fa  and  7  are  performed  for  all  faults;  th.e  others  are  used  as  needed. 
The  first  step  analyzes  CCD  information  to  determine  the  state  of  the  machine,  the  ty|e  t 


fault  and  whether  the  fault  occurred  during  recovery  from  a  ;  revious  fault.  Thi.ui  CPF 
•.nformation  is  used  to  identify  the  modulo  that  had  control  f  the  buses  wh.un  t!;u  ;‘ault  ■. 
reported,  and  also  the  module  that  was  being  addressed.  De'.-;  status  i  nfe,r;'',at  i  'U,  at,; 
Lestinij,  as  necessary,  are  used  to  iiientjfy  the  faulty  module.  ,\va;lable  sy.-.t';-:  t.  s  .uie-, 
are  then  examined.  The  most  resource-efficient  and  subscaui  ii  i  -  :  lu  1  I  -  ru  .s  i  s  t  a t  i::ta..’' 
is  taken.  Once  reconfiguration  has  bei'n  successfully  com|lotud;  n.-w  .■  1 .  m.  t.t  ,  .guoi 
m.i.moriC'S  and  I/O  devices,  must  be  conditioned.  .Memory  cenJ  1 1  i  e,n  1 1,  ;  i >,  1  ■ 

back  strateciy  eng  I  eyed. 

Briefly,  this  strategy  calls  for  critical  data  to  b-e  diubly  itui-e.g  (liu;  lex  da' 
u:;i  coiy  in  each  of  two  softname  contiguous  memory  blocks.  Cond  i  t  i  on  i  r,  ;  C'lu.ists  ,t  uu;  ■ 


tile  liuplex  data  from  the  tjarlner  soflnani"  to  the  new  nu-mnry.  .Status  wur  Is  .-o  me;-,,- , 

I/O  devices  must  be  read  to  clear  f  aul  L  -  indi  cat  ions  .and  le-iditv;  reiuests.  Wb.u't.  ii  cot.l  ; 
tion  and  conditioning  iiave  bei-n  complet.ed,  the  CCU  is  notified,  t  hardened,  timer  is 
stoppu'd  and  "read".  once  the-  system  clock  has  been  upidatei!,  the  Fxecutii'e  is  restartei. 

Fsin'-i  duplexed  data,  the  Fxecutive  re,ac  t  i  v.a  t  e^  each  previously  ;ict  i  I'e  task  at  its  last 
rollback  address. 

The  recovery  prourani  petii.rnis  tlie  followi;.  :  has  1 1'  fune't  jur.s: 

o  RKSeirKc'F.  M.AW/’\c,|;Mi,MT  -  Maintains  the  Syste-m  con  f  i  .:u  r  1 1  le;-,  table.-;.  Thi'Se 
indicate  thi’  current  status  of  all  so  f  I  wa  re- se  1  ec  t  .;il)  1  e  system  conii'ont'n  t  s  . 

A  .short  t  I  nil  failure  ,'ijstory  is  als',.,  kept. 

,'i  C'lPD  bilMci  -  Identities  and  protze-sses  a  Ciil.t  i-tait.  I!., it  is,  e  s  t  .  i  b  1  i  .-/ lie  s 

till'  initi.il  .system  con  f  i  ■  lur.i  t  i  on  .  This  is  known  ,is  i.e  s  t  i  c  i  loc/ss  i  net . 

o  'viAB.M  ST.'d-'I'  -  p' -r -s  t  ab  1  1  si  ees  t  la-  system  c,:  in  f  i  our  .a  t  i  on  to  t  tie  st  .at  e  oxistin-i 

tri'Cr  to  111’-  I  'iwer  t.iilure  .'i'  c  i  I’cumi'.s -n  t  i  on  shutd.iwn.  Tliis  is  refi-irei! 
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SUMMARY 

For  precision  three-axis  attitude  control  of  space  vehicles,  a  Double  Gimballed 
Momentum  Wheel  (DGMW)  as  attitude  actuator  is  a  favorable  approach.  A  high  reliability 
DGMW  of  modular  design  with  two  momentum  wheels  and  two  direct  drive  ultra  high  reso¬ 
lution  stepper  motors  plus  pick-offs  per  gimbal  axis  (full  redundancy;  no  caging  daring 
launch)  was  designed,  built  and  qualification  tested,  together  with  an  associated  wheel 
and  gimbal  drive  electronics.  In  addition,  extensive  system  tests  were  performed  on  a 
three-axis  air  bearing  table  wnich  proved  the  excellent  control  capabilities  of  this  DGMW. 
Besides  the  measurement  under  stationary  conditions  with  an  accuracy  of  18  sec  of  arc, 
also  the  transient  behavior  was  studied.  Due  to  the  high  torque  capability  (up  to  0.2  Nm 
around  the  momentum  wheel  axis  and  up  -to  1  Nm  around  the  gimbal  axes)  rapid  and  accurate 
pointing  and  repointing  of  spacecraft  are  possible.  Therefore,  the  DGMW  system  can  be  de¬ 
signed  into  tracking  loops  to  assure  continuous  pointing  of  spacecraft  instruments  with 
a  rapid  assignment  capability. 


1.  INTRODUCTION 

The  success  of  3-axi5  attitude  control  with  fixed  mounted  momentum  wheels  in  programs 
such  as  SYMPHONIE,  INTELSAT  V,  ECS  and  others  has  proved  the  concept,  where  two  axes 
(roll  and  yaw)  normal  to  the  spin  axis  of  the  momentum  wheel  are  stabilized  passively  by 
gyroscopic  action  and  where  the  control  about  the  spin  axis  (pitch)  is  provided  actively 
by  momentum  exchange  (speed  control  of  the  wheel)  with  the  satellite  (Ref.1).  For  iwo- 
degree-of-freedom  active  control,  V-configurations  are  successfully  flown  in  the  ECS  and 
MARECS  satellites.  Single  gimbal  systems  were  studied  also  (Ref. 2). 

To  obtain  a  three -deg ree -of -f reedom  active  control  several  approaches  are  feasible. 
In  this  context,  the  sole  utilization  of  thrusters  (jets)  is  not  taken  into  account  be¬ 
cause  the  necessary  fuel  supply  cannot  be  established  for  longer  missions.  In  contrast, 
momentum  actuators  need  only  electric  energy  which  can  be  supplied  by  solar  cells. 

Two  groups  of  approaches  can  be  distinguished:  Such  employing  one  actuator,  for 
instance,  one  reaction  wheel  per  axis,  and  such  utilizing  only  one  momentum  unit  which  is 
able  to  tilt  the  momentum  vector  in  two  axes  and  possesses  in  addition  an  alLernaticn 
capability  of  the  "length"  of  the  momentum  vector  by  changing  the  speeil  (like  in  the  case 
ofone-axisactivecontrol). 

The  latter  aiiproach  promised  a  comparatively  low  mass,  a  high  torque  capability,  ,3 
high  reliability  and  excellent  contrr.l  p,  r  >  ium  t.  i  e  s  ,  as  has  been  found  in  many  stu.lies 
(Ref.  3,4).  Therefore.  TELDIX  has  ile  ve )  nf].-"!  t.oth.  out'ar  and  inner  gimbal  DGMWs  ft'C  ESTEC. 
respectively  DFVLR.  In  th*:-  foil, owing,  .only  the  inri->r  'iimbal  DGMW  is  tr-^ated  which  could 
be  designed  in  an  t  r  ao  rd  i  n  a  r  y  c-rmp,u:t,  wiv. 

2.  DESIGN  OF  THF  IKjMW 

A  moiliii  ir  ilesi  in  ,>f  t*!.,  Duf-tw  w  i  ■■  .  h  ;c>  r,  Dec.tuse  ,nf  s»'V'ir.il  rr'asons,  of  which  tli," 
f  0  1  I  'Ow  1  ng  a  r‘,  n  im.'ii  ; 

Ad  a  j;  t  a  1,  li  1  t  y  ,  n  •rtiirii  I  I  I  *  •- r  n  I  regii  i  r--,m,''n  L 

A  V  1  1  1  a  t:  1  i  ■  ,  I  1  1  r  I  I  y  t  !  i  j  h  t  i  t  •/,  v  n  men  L  u m  w  lie o  1  s  . 

,j  f  t  u  r'  [  n  , ;  -,  ^  ]  j . .  r  i  r, ,  t  I  n  ■ ;  u  i  1  c  m  ',0.  *  -  n  i  j  m 

Uhl  a  1  1  f  1  ■■  1  •  1  ,  n  1  0  I  ill"  t  .<  c  t  r',-, ,,  .J  1  •  Ilf  J  1  rn  b .!  1  d  r  i  mo  I  r  s  ,i  nd 

h e  1  r  1  n  ,|  i  r  r  i  ii  ■ :  ,''m  •,  n  '  c 

Manuf  ic  1  ur  1  rig  ,  piiliticili  ■n  an  I  i. -■sting  i-l  v  an  t  a  ■-■s  .  leadin';  als-  t  , 

a  il  e  q  u  ,i  t  •>  r  u  ,,  |  s 

Tho  photograph  in  F  i  ,j  .  1  sh-'ws  t  be  DGMW,  d,.- c  c  r  i  I  I  ,  •  T..,  t  li  'wii'i  !■  :  ,ii;il-'  ■  >■ 
tent.  IL  onsisLS  ot  an  inner  gimbal  a  r  r  a  n  ■ :  •'■mon  L  wi'h  t  h"  l>,.ir;riis.  r..c;-|-s  iril  riiK-.'*-. 
and  two  whoels  which  may  lie  op,erated  s  i  mu  I  ■  a  ri,‘,  o  u  s  1  y  or  -no  t  ‘  ti,-'"  K"!''  as  a  ■  .1  1  r-'- 

>  I  u  n  d  .a  n  t  unit.  T  h  o  i  ri  t  o  r  f  a  r  e  t  a  t,  tu’  w  h  e  els  is  s  t  a  n  d  a  r-  :  ;  1 1 1 ,  ■-  i  t'  i  a  "  o  ;  ■:  ■  h  ■  •  ■  : '  ■  I  !  i  l  .  • 

can  be  designeil  to  ciistiamor  s  r-'-qu  i  romon  t  s  . 

The  Whoel  Dr  i  vo  Electronics  (WDE)  an, I  i  be  Girrbal  Dri-,-'-  11--'  'rooi'  liil'l  i  ar,-  huili 
as  separate  boxes  and  can  he  designed  to  define-T  intorf  ic--'  r.-j-i  i  rom-n  i  s  . 


3.  INNER  GIMBAL  ARRANGEMENT 

Because  the  momentum  wheels  are  desi'jne'l  wittiout  any  csam!  c,  r  loiT  rel'et  m^c  tia  n  i  s'n 
(Ref. 5),  It  was  also  intended  to  avoid  any  cadinq  for  the  inner  iiimit.al  r  r  a  no  emen  t .  This 
makes  a  symmetrical,  rigid  and  stiff  design  approach  mandatory.  In  the  pti  o  I  og  r  ,i  pdi  (Fig.  2) 
the  inner  gimbal  system  is  depicted  which  shows  one  of  th..-  two  wheel  interfaces,  one  of 
the  two  basic  axle  interfaces  to  the  satellite  m  the  f  r,  reg  r  I'lii  1  (which  must  li-  r m  p  1  t  e  ) 
by  a  ring  or  a  similar  structure  to  solidly  fix  the  two  axles  in  each  other,  comiare 
Fig.  1)  and  the  four  bearing,  drive  motor  and  pick --''ft  a  s  sem  h  1  i  -  c  .  two  for  each  axis. 

Both  gimbal  ax^s  are  very  rigidly  defined  by  two  preload-'',  p.airs  of  lia  1  1  bearings  in 
a  face-to-face  arrangement.  These  bearings  are  operated  in  the  vacuum  found  in  satellite- 
applications.  To  avoid  any  lubrication  problems  a  concept  employing  ceramic  balls  instc-ad 
of  steel  balls  in  the  bearings  without  any  lubricant  was  qualified.  Witti  tliese  dissimilar 
ma ter  1  a  1 s  no  c 0 1 d  welding  takes  [ilace.  Also  wear  is  negligible  due  to  the  small  accumulated 
angular  movement  over  rnission  time,  as  could  be  demonstrated  in  ac  c  1 -r  a  t-'-d  lif-c-  tests, 
simulating  a  ten-years  mission. 

These  findings  are  very  important  because  the  bearing  suspension  is  the  only  critical 
element  not  provided  in  a  redundant  manner.  Due  to  these  lest  results  and  the  environ¬ 
mental  tests  simulating  launch  loads,  the  bearings  can  be  practically  treated  in  terms  of 
reliability  like  a  part  of  the  satellite's  structure. 

The  motors  are  direct  drive  stepper  motors,  needing  no  extra  gearing:  they  are  free¬ 
wheeling  if  not  energized.  This  is  essential  for  the  redundancy  concept;  No  special 

mechanism  is  necessary  for  switching  from  the  primary  to  the  redundant  unit. 

The  motors  -  having  the  same  mechanical  interface  -  are  available  lu  two  versions, 
a  tooth  type  and  a  friction  type  motor.  The  tooth  type  motor  has  a  basic  step  .angle  of 
2  min  of  arc  which  can  be  subdivided  further  by  eierironic  me;aris.  The  advantage  is  that 
-  starting  from  a  zero  reference  -  by  step  counting  the  actual  angle  can  be  determined. 

The  friction  type  motor  operates  with  a  step  angle  of  about  10  sec  of  arc,  depending  on 

load. 

Both  motors  were  tested  -  also  life  tested  -  -  x  i  >:.n  s  i  ve  1  y  in  air  and  thermal  vacuum. 
The  wear  in  the  gold  plated  contact  zones  between  motor  stitor  in-l  motor  rotor  (teeth 
resp.  friction  surfaces)  was  very  small  and  acceptatil--  ifi--r  o^cessive  life  tests. 

Like  other  motors,  this  motor  consists  -if  i  si-itnr  a-n  i  a  rotor.  The  sl.aicr  of  the 

friction  type  motor  is  designed  as  a  rirr;  witii  a  i  i  rc  umf-r.-nc  i  1 1  r'onir.ii  surfac-'  (Fig.  3) 

and  IS  provided  with  equally  spaced  e  1  ec  l  rom-ign-t  s . 

The  rotor  needs  no  extra  bearings  liui  i us  pv*rh|,:-d  !'>  th.-  giml-al  bearings  and  con¬ 
sists  of  a  diaphragm  which  is  equipped  wiin  i  s.-.;rnen  t  s-ft  iron  rnr.;  (the  edge  of  which 

can  be  seen  in  Fig.  2  at  the  extreme  right  ).  If  a  coil  is  en-'-riizel,  ttie  stator  attracts 
the  rotor  ,3 1  the  location  of  the  coil,  an  I  st.it'ir  and  r-tor  ur-v  civTiecied  to  each  oitier 
by  friction  force  (the  coil  with  tdi)  .iifs-t  is  also  en,. t-,)  1 /.-‘.j  thus  doulling  the  torque 

capability).  Now,  if  ttie  coils  are  en.-r  1 1  1  in  i  se  ju.-nc  e  _  t  t,,.  n  i  1  1,  be  t  wii',- n 

stator  and  rotor  are  mioving  .irournl.  Be-  a u s ■;!  the  sm-i  1  1  differen;:-’  'il  the  actual  radii  of 
stator  and  rotor  (in  iither  words:  the  small  .ingle  |,.>twe..n  tie-  plin  01  tie;  stator  surface 
and  the  connection  line  rotor  '.'isiien',  i-.n  -  ison!.!'.!  ■it-ii  ot  t  te-  rotor  to  the  stator)  a 
small  advance  (step)  ot  tlo'  ronor  e,  1  .jr',  wi’h  .e-tcn  -.wit.  hirei  which  is  t  r  ,i  n  s  f  e  r  r  ed  to  the 
axis  by  the  di.iphr.agra.  Depend.  1  lei  .tn  in-  ..-n'-,.-  of  tn,-  segii.;(u; ,  ih._.  gimb-ils  can  he  driven 
in  both  directions.  As  .ilr.eidv  men  t  i  .jre-d  ,  it  n  ..  le-  .it  the  c 1  1  s  is  'iierijizel,  t  le--  rotor'  is 
free  to  move.  Thus  ltie  re.lundant  Ciit  ,r  on  lie-  .ither  si-b-  of  th-i  jimbal  ixis  can  bo  op.  rat.;-! 


The 

tooth 

tyiie  motor  h.'i 

•> 

a  <] 

r  *' 

it  n 

■jTit 

r  it 

pLti 

0  n 

LhP 

c  1 

r  e  urn  f  e  r-'-in; 

e  0  f 

t  h s  t  a 

tor 

anil 

r  0  f  0  r  wit  h 

a  lift 

r .  .  nc  •  ■ 

1  tl 

*  h 

-• 

H'lml' 

•  '  r 

t  in 

n 

r  m 

r  p 

t  0 

t.  tl . 

In 

t.  his  c 

a  S  e  , 

’  to-'  s  t  1 

t  or 

h  a  s 

720 

tee  th  , 

1  tl  e  r  0 

tor  / ? t 

JU-‘ 

f" 

1  . )  r  r. 

, 

1  L 

t.  *:■  r 

0  n  *> 

"  p 

IPC 

(  r'  i  c 

a  1 

rp  VP 

lull  ij  n 

"  til.' 

,1  fl  V  a  n  r 

"  1  s 

0  n 

1 0  0 1  h  .  T  h  s' 

S  f  S'pw  1 

iith  1' 

V  h 

>■  rl 

■1  -j 

iri' 

t  0  0 

f  tl 

'1  I  V 

I  ilp'l 

Iv 

Ui'.- 

n  u rr;  h- 

r  0  f 

c  ..a  1  Is. 

1  t 

S  ti  0  u  1  d 

he  men 

!.  1  tries) 

t  h 

a  I 

r  fi 

m-,;  t 

r'  -b  1 

rp 

we  1 

1  s 

IJ  1  L 

■1  f 

or  ■! 

1  ■]  I  t  1  1 

C  on  1 

r  0  1  (Re 

r  .  b  1  , 

Prss 

s  e  n  1 1  y  , 

a  m  1  c 

r  1)  s  y  n  [ . 

1  1; 

k  -  a 

1  t 

j  s 

!J  a  f 

'■■1 

wh  1 

C  tl 

1  S  S 

ij  r>- 

s  a  n 

-w- 

c  1 J  r  '1 

c:  V  0  f 

hc-t  t  .' 

r  1  h.in 

2  fTi  1  n 

0  f 

arc  0 

V  e  r  t  h 

wtio  1  e 

■11  mtei  1 

r 

'  t 

t  1 

li  1 

r . 

\n 

0 

t  + 

7  . 

S  . 

ItU' 

rp 

so  1  a 

;  1  0  n  1 

s  a  1 1 

. )  u  .1 1  e  ; 

r  f  i 

S  t  e  ) 

w  1 1|  t  h  . 

Ths'. 

G  i  m  I'l  a  1 

Or  1  ve 

E  1  t  r 

•a  n 

1  f  '3 

fl'-:  1 

Lx 

I, 

.1  I 

sc  IJ 

.1  h 

sO  f  0  ^ 

-1 

r  rl  n  s 

1  .1 1.  s  " 

t  h*: 

ni't'".  r  j 

M'l 

k  - 1)  t  f 

f  0  rm  .1 1 

s  info 

the  I  , 

r  m 

Ik  -v 

r 

l 

r 

j 

hy  t 

hi' 

1  !  t. 

I  I  IJ 

0  n  t. 

ro  1 

S  V  b  1.  *■'  ''i 

4  . 

MOMENTUM  WHEEL 

fn 

r 

n  n 

s  r.  1 

f  IJ  1 

’  p  a 

OGMW  , 

i  I 

1  T  L  1  1. 

'  I  X  rni  irr; 

•'■oL 

am 

wh 

eels  . 

1 ' 

r -T* 

n  t  ; 

1  V  . 

iva  I  1  j; 

I'.'  Ml  t 

0  .]  n [Ti :  fl  3 

a  re)  u  1 

:  a  r 

iJlTi 

pn  L 

'  i  T'i 

O'f 

/ 0  Nm  s  , 

r 

an 

rr,!,Fjnt.f- 

'1  0 

n 

Lh  0 

1  n  n  e 

r 

bin  h 

i  1 

Sy 

n.  .  I : 

lO-'  L  '  I 

hp  .1  r  r  .'i  fl  ] 

rr.  e  ri  f  , 

1 

hc' 

1 

WP 

wh*- 

■‘Pis 

I're  1  on  (J 

1  h 

a  1 0  1 

DbMW 

'Tl  '  J  S 

I.'O 

opera 

!.•> 

il 

1  at 

.  1  vs 

■  !  P  t  !i 

wh-'s  -  1 

’  >  1  fl  :  •  ■  r  - 

f  ,1 

1  Cl 

)'h 

0  s  1 

t.  0 

r  n 

a  lion  ,1  1 

E*  n  s  , 

In 

F 

1  '■) 

.  4 

.3 

S  *’  (. 

t  1  0  n  ,-i  1 

hr 

a  w  1  n 

ot  Lh-‘ 

m.' 

n  1  u  rn  w  ti  >• 

1 

1  s 

sti. 

■1  w  n  . 

,  I  1  1  ■„ 

1  Oih! 

f  1  1 r  h'S  1  ;n 

w  1  t  h 

f  1 

V 

s 

IJ  t)  a 

S 

■  fn,  h  1 

is's;  \{i- 

10')  w  1 

?  h 

h-jo 

1  !. 

ai 

1  n  1.  f  •  r 

f  :] 

r  E' 

ha  ; 

1  1  ! 

H-'  .'1  r  1  n  0 

unit  . 

1  1  V  W  li‘ '  1 

m  1  .  s 

.  ^ 

p  t 

f)  r 

r  ',1 

Loi 

’■  -1  n 

t  m  0  1 0  r 

s 

L  rj  L  0  r 

w  i  L  h  :: 

.  j  FT  rri 

IJ  1 

a  t  I 

on  1 

PC 

t.  r  n 

1  {  ' 

The  housing  is  a  lightweight,  dt-sign  with  a  tenter  stub  bolt  to  carry  the  loads  exert¬ 
ed  by  atmospheric  pressure  after  evacuation  to  about  1  mbar.  The  housing  is  black  painted 
for  thermal  radiation. 

The  ball  bearing  unit  is  the  most  critical  and  significant  subassembly  of  the 
momentum  wheel.  It  is  designed  to  meet  the  launch  load  requirements  without  any  caging  or 
load  relief  and  to  operate  subsequently  for  missions  of  more  than  10  years  with  high  re¬ 
liability  (Ref. 7).  In  the  meantime,  more  than  35  years  of  accumulated  flight  experience 
(with  one  wheel  operating  more  than  8  years)  without  any  failure  are  a  good  proof  for  the 
reliability;  in  addition,  on  a  total  of  nearly  50  years  of  life  test  results  can  be 
counted . 

The  flywheel  mass  is  linked  to  the  ball  bearing  unit  by  spokes.  Resonance  step-ups 
are  limited  by  a  special  damper  mechanism.  The  brushless  and  ironless  DC  motor  is  a  low- 
loss  high  reliability  design  which  also  exhibits  redundant  features. 

A  Wheel  Drive  Electronics  with  torque  and/or  speed  control  modes  f o rni  s  t he e  1  ec t r  i  c a  1 
interface  required  by  the  attitude  control  system. 

5.  MAIN  DATA  OF  THE  OGMW 

In  the  following,  the  main  data  of  the  DGMW  are  listed.  Concerning  the  mass  they  are 
based  on  a  nominal  angular  momentum  of  50  Nms  for  each  of  the  two  wheels.  Tested  were 
DGMW's  with  20  Nms  and  50  Nms  wheels.  As  already  mentioned,  presently  up  to  70  Nms  angular 
momentum  wheels  are  available.  The  impact  of  wheels  other  than  50  Nms  concerns  mainly  mass 
and  power  conjumption. 


Dimensions 
Diameter 
Height  . . 


380  mm  (envelope  incl.  tilting) 
335  mm 


Mass  .  22.4  kg 

Two  wheels  .  15.2  kg 

Gimbal  system  .  7.2  kg 

Whee  1 

Angular  momentum  .  50  Nms  , 

Speed  .  4600  min'  +  10  % 

Reaction  torque,  max .  ^  0.1  Nm 

Power  .  steady  state  ....  £  8  W 

at  max.  torque  ..  j_80  W 

Gimbal  System 

Tilting  capability  .  7.5'^  each  direction 

Torque  capability  .  0.7  Nm 


Step  angle  .  10  arc  sec 

Step  frequency  .  >  130  Hz  wi 

Pick-off  range  .  +  8° 

Pick-off  resolution  .  <  1  arc  min 

Pick-off  linearity  .  +  1  % 

Power  .  <  12  W 


10  arc  sec  nominal,  depending  on  torque 
>  130  Hz  with  50  Nms  wheels 


Environmental  Capability,  Qualification  Level 


Tern  pe  r  a  t  u  re 
Vibration  .  . 


15  “C  to  50  °C 


sinusoidal  10  to  2000  Hz  6  g 

random  20  to  60  Hz  0.05  qVHz 

60  to  300  Hz  +3  db/oct  to  0.25  n’/Hz 


Linear  acceleration 


300  to  1200  Hz  0.25  g-'/Hz 
1200  to  2000  Hz  -  6  dh/oct 
.  23  q 


Reliability  .  0.998  (7  years  i 

TEST  RESULTS 


Together  with  an  appropriate  Wheel  Drive  Electronics  (WOE)  ami  a  Gimbal  Drive 
Electronics  ( GDE ) ,  a  variety  of  tests  at  different  levels  were  conducted.  These  tests 
comprised  environmental  and  functpanal  tests  of  the  DGMW,  including  WDE  and  GDE  -  which 
are  only  shortly  commented  here  _  and  system  integration  tests  at  MBB  (Mess^-rschmItt- 
Bo  1  kow  -  B 1  ohm  )  and  DFVLR. 

6.1  Functional  and  Environmental  Tests 

Successful  functional  and  environmental  tests  w  re  performed  within  the  scope  of  a 
national  television  salellile  program.  It  should  be  noted  that  the  en v  i  ro nmen t a  I  tests 
were  performed  witiioul  any  loarl  relief  or  caging  provisions.  These  tests  verified  the 
data  specifications  of  which  the  main  are  accumulated  in  para  5. 


6 . 2  Sys  tern  Tests 


System  tests  were  ci;ri-:iutt 
digital  altitude  and  o  r  ti  i  t  con 
results  of  these  tests  can  tj,- 
than  0.01  degree  in  pitch,  yaw 
esting  is  also  the  suggestion 
earth  infrared  sensors  not  onl 
spacecraft.  As  the  infrar.-d  se 
r e c  1 1  0 n  to  the  centre  of  the  •• 
a  ea r t h  -  s t a 1 1  on ed  beacon  is  di 
seems  to  be  very  important  b.  c 
racy  depends  mainly  on  the  s--n 

Extensive  3 -ax  is  atlitud-'- 
air  bearing  table  or  th.-  bfvik 
ed  for  direct  dii.’iial  control 
associated  inteTi!!  ijFVlR  re  pc 
request.  These  t'-sts  w‘:-re  con  I 
intro'duced  by  tfie  prc.seritly  av 
of  3-axis  active  altitude  coni 
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k e  s 'J  1  l  s  of  t  ti e  s  t  j a y  s  tat e  o | ■  e r  1 1 1  ij n 
actiievi-d  accuracy  in  roll  and  yaw  is  about 
angle  of  Ifie  friction  type  slepiier  iiolors. 
error  at  1  step  and  could  be  a 1 1 r i  inj  tod  to 
bearing  table  aiiil  ground. 


arc  shown  in  Fig.  5.  As  can  be  seen,  the 
18  arc  sec.  ri/ucjhly  the  double  of  the  stei' 

This  error  is  a  little  higher  than  i  ti  e  e  » f  e  c  t  e 
an  error  in  the  signal  transfer  between  air 


Attitude  manoeuvres  were  performed,  too.  Input  was  a  •defined  change  of  the  attitude 
angle  in  one  axis.  The  response  to  the  other  two  axes  ( cros s -coup  I  i  n  .q  )  was  recorded  also. 
In  Fpg.  6,  the  plots  for  a  pilch  and  for  a  roll  input  are  shown.  The  'Je  v  i  a  1 1  on  s  are  below 
4  0  a  r  c  s  e  c . 


L'ist  not  least,  simultari  lus  unloading  cycles  in  roil  and  yaw  cati  be  recogni.i'ed  in 
Fig.  7.  Tfie  input  signals  were  reaction  tor-gues  ■gen.-tated  by  gas  i-'ts  cn  the  air  irearin'C. 
table  aliout  the  roll  and  yaw  axes  which  are  compensatcl  t- y  a  tiltinu  i.'f  the  gimbals  at'Out 
the  approiiridte  axis.  The  resulting  allitud'i  errc.rs  are  .rjain  v>rry  sii'ill.  Oti  i  y  (luring  the 
change  of  slope,  higher  peaks  are  visitilo  which  are  still  reiativi-ly  s■•i•ilI  (80  arc  seci. 
Ib-.‘ic  results  comp, are  favorably  witli  those  ilescribc.d  i"  kvf.ft. 

Further  tests  on  this  air  beariin)  trible-  were  aime.i  i:;;  '.fclvin;  •  h"  intlnenc-i  (:if 
fl-xihle^  structures  (e.g,  solar  panels)  on  ittitij-:-,-  C'citr;,  1  .|;■';ll••y,  Ih-  s'ltell  lie's 
rTiom--n  t  urn  is  s)mulal«:'d  by  addiliorpil  reaction  wli.’el,  ibout  e.'ich  .  i  s .  Tfi'"'S'(  whe".'ls  couM 

alsc  be  utili.ted  ti.)  introduce  di  sturb.rinc'?  lorgue-'.  ■((''•■f.l2;. 

/,  POINTINfj,  ACgUISITlOh  AMD  TRACKING 

In  adilition  t(  .itlitude  contr'’l  with  a  bigti  ■)  yr  ■.■•.■'  (■p' :  ,  stlttii'-ss  -.I'Prin'jt  1  i  s ' 'i  r  t  i  n  ■.! 
t  n  r  i'ju  'S  ,  .1  DliMW  Ciin  .il'.'i  fulfill  it  ttie  '.■ifte-  iim"  the  f.isK  't  an  ittllub/  '3  C  t  u  .1 1 0  r  tor 
tracking  Isof/S  of  high  ‘''.curacy  'a  assure  •::  "ii  t  i  n  uoii  s  p'lritinq  i  n  s  l  runc-n  t  s  of  i  si'aC''- 

vehisle’  to  moving  tar'.P'ts  with  lie.-  capribility  '■  t  r  'i;  id  r.-  i  s  s  i  onn  .'..n  l  i.-'j  •  llier  targi-ts. 

At  C  ('.' rd  I  H'i  !•  ife-  lie  sc  r  1  pfd  in  tti-‘  first  se-rli.m  t  '  h--  rrs-vicus  p'lr.i,  error 


s  1  ;  n  a  1  0  ,  f  o  r  i  n  s  •  i  n 

'  f n  r  'J  t 

ej  by  '1 

;.ri  1  •  .J 

I  •  ;  '•  :  f '  1  •  f 

i  "1  in.-  ;  ti  1 

'•••  ;  1 

111  1  ),  1  1  n  1',:'  f 

into  t  tie  ,i  t  ;  1  1 11  d'S'  c 

Ofltri.il  1  0■.-gl 

s .  As  1 1  a 

■leino  II  t  I  ,i 

•"‘d  ■! '1  r  lb 

•  j  1 '  • 

•  V  ■■  ?  ’t:  t.  '>  t 

a  n  '1  il  y  n  a  m  i  :  r—  s  i  d  ii  a 

1  e 

rr  -J  r‘ 

•  site!  lie 

r  t  ha  r, 

s  '!  m  1  •  1  O'  s 

t  :  r  • 

'With  t,  h  •'  pi  r  i  -  s  ■• 

rn  1 

y  -1  vail  1 

Ue  ■■  ,i|. 

1  b  1  1  1  !  V  I,  t 

1) .  7  M"(  ■ 

r  ! 

!  !■  -M  r  :  ?  1  ;  ri  t  Iir 

7  00  k (|  m  '  m.")n,e n  i  .  r 

ri 

'  r  '  1  .1  r  J  .  .]  ri 

I  ri  :■  n  1  a 

I  Miej.-r  1 

1  f  t  1 

"if.:  !  ■■ 

Tti  1  s  iti,'  1  n  s  t  ti  a  I  t  t 

•  r 

10  ',  in 

iinl--  'it 

itf  lit. 

b  .le|ix.-.-. 

1  .1  n  t"' 

■:  ;rr"j  1 

It-  ]. 

It  hill  to'-  r  t  r  1 

J  •  • 

f  U' i 1  •  1  i  1 

IT  • 

r-eio  1 

I'.-.;  ;  bi  1  lb 

.  1  •  A  r  It* 

,■  : 

r'  •  fi  ?  -1  Ml  ■'  r  f'  1 

monriMi  t  ,)  f  i  n.-  r' t  i 

t  .) 

• , ;  •  5  • ,  r  •  (  r 

it?  ;  r  t 

1  '  '  t  ' 

ri  :  li  -.[I 

1  '  r  i  t  ? 

■  ‘  }i 

.  r  •  ■  r  1  ?  1  v  '■  ; 

f  1  ed  ,  01  mil  a.  1  '1  r  1  V  •• 

'■  r  w  i  *. 

h  ;  ■) hi- r 

?  f .  r  •  •  ■  J  ■ 

.  M*  i  )l  "ri 

.  ’  1  •  •  ;  r 

The  ultimate  t. 

ir'd 

|e  limit 

ina  t.'.ct 

'■r  i  -> 

t.  ;  1  ?  ;  Il 

t  I  ; 

f  :i  -i;  ; 

1  i  '  V  1  Ml-  ■  1  -r 

whPi,'  1  .  W 1  t  h  5  nme  •le 

r,i  t. 

inq  the 

lorjij..'  t 

a  p.i  b  1  1 

i  ’  V  n  1  ■ 

1  i  ;  1  lei 

f  ?  ;  -J 

’i  1  *  I  1  r)  ■  r 

of  200  Nm ,  Due  to  the 

1  i  '1  h  1,  w 

Mht  ■-  in 

t  r--:-  : 

If'!!.  h.- 

"k.  •  t 

•  ?-'  t  i 

y  wt)'-"  1  f  '  !  T  ‘ 

limitin')  f  :i  r  t  0  r  f  n  r 

(,  u 

e  t  1  1  t  I  n 

1  tiir-'pi.. 

.  In  I 

le 

!  ■  ‘  .  1  ;  ’  1 

M)  til" 

'  :  i  i  1  ;  1  1  v'  ..  :  n 

taken  into  .'icco'jnt. 

wtiic  h  1'-,  ,'i 

t  1 L  t  0.  r 

it  30 

I  -  1.  -.  !  •■  ?  « 

‘  '  1  t  r.  .  ,  t 

iM  (  Il  I  M  ■  .  . 

A  r  0  u  n  d  t  h  e  w  b .  • 

e  I 

-1  X  1  s  I  he 

t.  r  .'J  Ij.- 

.  1  i-.;  f:  ! 

.  !  I  V  i  -  ■'  ! 

1 1  1  V  1  1  'M 

I'v 

i  .  V.'-  r'  r  1  1'^  f  •. 

For  the  p  r  0  s  e  n  t 1 y  s 

pec 

1  t  1  ed  n  i 

‘  .  m  c  t  ■:  I  r 

i,  ‘-J  r  c;  1 J 

-  -it  i i  .  ?  N' 

;  ;  •  A  • '  T 

‘  HO 

A  '  J  !  ?  •  •  i  r'  :  ;  1 

which  is  r  1  s  1  n  ()  a  bo  ij  t 

P r 0 ( . or  1,  I 

.)  n  ,1  i  1  V  w 

1  1  11  Ml 

* 

I  J-  .  h';  ' 

\  [  :  ;  r.  ■,  1 

here  that  normally  only  in  two  axes  i  in  ;ti  t  r  n  l•■p;l•■  1. 


3. 


CONCLUSION 


For  active  attitude  corilri_.l  i.t  spatecratl  sever.il  ittitui--  ; '  t :  r  ■'  .. 

taken  into  consideration  (Ref.laj.  One  :i  tlie  ureterred  :  i  r,i  i  s  ■  ;  n 

attitude  control  is  a  DGMW. 

A  high  reliability  DGMW  of  inodular  design  was  de  ve  1  J  ind  ■- u  c  c  ■■  s  s  f  .  j  .  y 
cation  tested.  System  tests,  also  on  a  3-axi5  jir  liC-arin;  table,  io-vd  tn-r  ’ 

accuracy  potential  of  this  DGMW  for  3  -  a  .x  i  s  active  attitude  c  o  n  t  r  o.  1  ;  •  st-nc  ■■■■:'  ■  ■  t  : 

dilion,  DGMW  systems  can  be  designed  into  high  accuracy  tracking  loopv. 
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1.  INTRODUCTION 

Certain  ss  ellite  missions  require  gyroscopes  ol  ver\'  high  accuracy  for  atlitiufc  measurement.  I  ormerk  .  iT'aleil  rale 
integrating  gyros  have  been  widely  used.  More  recently  in  the  l'S.\.  2-a\is  DKi's  have  been  used,  ami  agencies  are  now 
beginning  to  consider  what  type  ot  instrument  to  use  in  the  future. 

Whereas  most  US  companies  have  tended  to  abanuon  tJoated  gyros  in  favour  of  dry  gyros  i  prineipiilk  on  grounds 
of  manufacturing  cost,  we  suspect)  we  at  I  erranti  have  continued  to  develop  and  improve  tloated  instruments.  We  are 
firmly  of  the  opinion  that  .or  many  satellite  missions  they  will  ci'iitinue  to  offer  the  best  perform.ince, 

heatures  such  as  fluid  dissociation,  which  are  rumoured  to  occur  in  tloated  gyros  over  a  long  period  of  time,  can  be 
controlled  and  minimised  by  care  in  design,  assembly  techniques,  and  cleanliness.  In  .my  event,  the  phenomena  caused 
by  fluid  effects  genei'.dly  only  affect  g-sensitive  perl'ormance  aspects,  w  hich  are  of  no  relevance  in  orbital  applications. 

2.  b  LOATtl)  GYRO  ACT  IVT  I ILS 

file  instrument  which  has  had  the  widest  .iiq'lication  in  sp.ice  m  1  urope  is  the  l  erranti  I  \  pe  12.s  (i\  ro.  I  his  has 
undergone  continued  development  ami  improvement  since  its  original  license  from  Singer-Kearfott  in  the  ! duo's.  It  is 
a  relativelv  small  uistrument.  offe:  ng  in-run  drift  stabilities  in  the  r.inge  .001  to  .OOtlOS  '  hr.  depending  on  how  it  is 
Used.  It  has  been  used  in  the  I  K.A.k.  I  \(  ).S.\  I  .  and  Ml  K.\ND,\(  \4)  satellites,  ami  in  the  IT  DO,  Black  Arrow  ,  and 
AKIANI  l.iunchers, 

I  he  question  h.is  .irisen  as  to  w  hether  ball-bearing  gyros  are  suit.ib'e  lor  long-life  -atellite  .inplicatioiis.  I  iglit  v  ears 
,igo.  we  started  a  life  test  ot  I  1  of  these  gv  ros.  under  contr.i-.T  I  rom  K  M  .  I  he  g\  ros  were  first  si  h;ceted  to  an  env  iK'ii- 
mental  test  simulating  .i  S(  ()U  !  launch.  I  he  gv  ros  have  been  running  ce.nlinuallv  in  .i  parti.il  vacuum  environment, 
with  performance  checks  and  stop  starts  tv  picallv  every  1  2  nii'iitiis.  I  hey  have  all  now  reachcil  over  uli.OilO  hours 

running  witlunit  failure  or  degravlation. 

Mils  performance  lustifies  ihc  cl  'im  lluit.  foi  ve.ir  lifetime  sat.  lilies  .it  least,  given  uil.iblc  technolog,  ,iml 
process  control,  ball-be.iring  gyros  .ne  peileclly  aviequ.ile 

I  he  life  test  is  now  continuing  iimlei  I  he  aiispn  es  o!  I  he  1  -S  \  1  it  )|  >  M  i’l  N  i  prog,  ,i  mine 

I  he  I  s  <  ,yro  h.is  been  eclcnsivclv  ev.dua.'ed  m  terms  olThe  spectral  characterisi.ics  oi  ,ln)i.  both  lo- m  ,  n 
lei  in.  1  lie  in  i  iin  cli.ir.iclerisl  k  s  .ire  ,i  1  mi  cl  ion  oi  vv  heel  speed.  1  or  m.ni'  a|iphs.il  loiis.  1 1;.-  ex  n',  .ue  ' 

speeils  .irouiid  il  T  I/,  m  m.iMinise  .iiigular  r.ile  xcip.-h  hi\-  W  here  this  is  not  ,i  limil.ilu'-  'hev  i-.,,  n.  - 
speeds  u|'  to  si  ||  I/,  to  give  ii:-.(iiov  ed  drift  st.ibililv  . 

I  he  sli.'i  I  term  shar.iclcrislKs  .ire  evemplilied  In  I  he  ,l.ita  show  n.  .'hi  mie.l  .U  All'  i 

,ire  e-vem|'lilied  bv  the  il.it.i  oi-it.iined  in  the  I  \DS  |Hogi.iiiin'e. -.le-.,  iii'e,l  !■'  M  ,  \  : 

In  give  in  ev.iniple  o|T  he  ,Ti.ir.i..l  eiist  !cs  ,it  s'!  i|  I,'  w  he-l  -p-n-.l  tf..  ■  s.-:  ■ 

g-inseiisil  ive  ri  Ills  on  Is  1 1  h  I'x  |i,il|-h,,,ii  mg  ,,,i,!  i',  e.,  '■  iiim.'gvT  '  ' 

II  c.in  be  ,een  til. it  the  a  m.e-miin,  I'Cs  '.so---, 

.idv.inl.iges  .ire 
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Abstract  :  An  optimal  solution  is  provided  to  the  problem  of  attitude  estimation  for  a  three-axis  stabili¬ 
zed  satellite  devoid  of  yaw  sensor  and  undergoing  significant  disturbing  torques. 

Influence  of  such  torques  on  expectable  system  performances  Is  analysed  via  a  geometric  approach. 

Estimation  of  satellite  attitude  is  demonstrated  to  be  systematically  impaired  by  an  error  resulting  from 
the  system's  torque— induced  unobservability. 

The  said  error  is  then  explicitly  assessed  as  a  function  of  the  disturbing  torques. 

Furthermore,  assuming  a  priori  knowledge  of  the  disturbing  torque  amplitudes,  an  optimal  observability  cano¬ 
nical  form  is  derived. 

Optimal  attitude  estimation  is  finally  provided,  together  with  the  expression  of  the  relative,  thus  minimized, 
systematic  error.  ^ 

Introduction 

Stabilizing  satellites  by  means  of  the  bias  momentum  concept  is  known  as  a  simple,  reliable  and  cost¬ 
saving  solution,  particularly  well  suited  to  geostationary  missions.  Its  main  advantage,  doing  away  with  yaw 
sensor  and  gyros,  is  nevertheless  impaired  by  loss  of  accuracy  -due  to  unobservability  problems-  when  the 
spacecraft  experiences  significant  disturbances. 

This  matLei  is  now  to  be  paid  all  the  more  attention  as  ever  improved  fine  pointing  accuracy  is  demanded, 
while  the  constantly  growing  size  of  satellites  exposes  them  to  increasing  disturbing  torques. 

This  paper  shows  that  unobservability  can  be  overcome  to  a  wide  extent  by  means  of  an  original  geometric 
approach.  Use  of  optimal  estimation  and  control  algorithms,  easily  implementable  on  a  microprocessor,  provi¬ 
des  -even  on  spacecraft  undergoing  severe  disturbing  torques-  accuracy  performances  almost  as  good  as  when 
the  zero-momentum  concept  is  used. 

In  spite  of  the  confined  application  of  the  method  described  here  to  standard-type  three-axis  stabilized 
geostationary  satellites  its  easy  extendability  to  any  type  of  large  flexible  spacecraft  should  be 
emphasized. 

The  concluding  achievement  of  our  work,  the  baselines  of  which  are  featured  hereinafter,  is  the  demons¬ 
tration  by  a  simulation  software  that  accuracy  performances  can  be  improved  by  a  factor  two  with  regard  to 
most  other,  classical  methods. 

For  greater  simplicity,  this  paper  is  clear  of  all  calculations  and  theoretical  developments  which  may  be 
found  in  the  three  Appendices  hereto. 

1.  SataUite  dascription 

The  geostationary,  three-axis  stabilized  spacecraft  considered  here  uses  the  pitch-momentum  concept.  Its 
main  constituents  are  : 

•  a  central  body  with  some  fixed,  rigid  appendages 

•  sun  oriented  solar  panels 

•  a  fixed  momentum  wheel  with  momentum  vector  aligned  along  the  pitch  axis. 

This  wheel  provides  gyroscopic  rigidity  and  is  operated  as  a  reaction  wheel  to  control  the  pitch  axis 

•  one  IR  sensor  providing  continuous  noisy  measurements  of  the  roll  and  pitch  angles 

•  one  sun  sensor  providing,  once  or  twice  per  orbit,  noisy  measurements  of  the  yaw 

angle 

•  thrusters  to  ensure  unloading  of  the  wheel  as  well  as  control  of  the  roll  and  yaw 

axes. 

The  features  here-above,  it  must  be  emphasized,  are  shared  by  quite  a  number  of  various,  now  orbiting  commu¬ 
nications  satellites,  civil  (ITV,  OTS,  MARECS,...)  and  military  (FLEETSATCOM,  etc...)  alike. 

2.  SatelUta  dynamics 

Appendix  1  hereto  develops,  via  a  quasi-Lagrangian  formulation,  a  general  method  to  obtain  the  non-linear 
equations  of  motion  for  a  satellite  presenting  any  number  of  rotating  appendages.  Such  equations  are  subse¬ 
quently  decoupled  to  enable  analysis  of  the  rotational  motions  independently  of  the  translational  ones. 

Then  the  spacecraft  rotational  equations  are  linearized  about  the  spacecraft  prescribed  behavior  to  achie¬ 
ve  a  state-space  representation  of  the  system  and  to  apply  the  now  classical  theories  of  optimal  control. 

2.1  Spacecraft  non-linear  rotational  equations 
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2.2  Spacecraft  linearized  rotational  equations 

Prescribed  behavior  defines  itself  by  the  coincidence  of  spacecraft  reference  frame  with  the  instant 
local  orbital  frame  (see  Appendix  III,  section  1.2). 

This  stems  from  the  necessity  of  having  the  antenna  beam  constantly  pointed  over  some  predetermined  spt)t 
on  the  earth.  These  linearized  equations  are  expressed  as  (see  Appendix  I,  section  3.3). 
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3.  System  state  space  representation 

Since  control  of  the  pitch  motion  appears  as  quite  simple,  this  paper  focusses  on  the  processing  of  the 
roll-yaw  equations. 

If  we  denote  by  Tz  ®nd  Ty  the  components  of  the  satellite-affecting  disturbing  torques  on  yaw  and  roll  axis 
respectively,  these  equations  appear  as  (see  Appendix  III,  section  1,4)  : 

(  (03  x)y>  +  y'fi-(03y)\li  +  xip  -  i  T+-^  T 

^  H  Z  H  X 

(  y)^  -  zi*(03z)'il  -  y ~  ly 


with  'P  and  ip  roll  and  yaw  angle  respectively. 


3.1  The  classical,  reduced-order  model 


The  disturbing  torques,  since  small,  random  disturbances  are  assumed,  are  usually  idealized  as  white 
noises.  The  resulting  state-space  representation,  referred  to  as  the  reduced-order  model  hereinafter, 
then  may  read  as  : 


^  .X. 
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Measurement  y  is  provided  by  the  IR  sensor  while  W  accounts  for  sensor  noise. 

The  reduced-order  model,  despite  its  robustness,  is  well  known  for  its  poor  efficiency  when  faced  with 
significant  disturbances. 

3.2  The  proposed,  augmcnted-order  model 

A  tentative  overcoming  of  the  drawback  here-above  consiats  in  taking  advantage  of  the  quasi-determinis- 
tic  nature  of  the  disturbances. 

The  disturbing  torques,  witness  the  graphs  in  Fig.l  and  2  attached  hereto,  may  be  adequately  modeled  as 
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truncated  Fou-ier  series,  say  :  t  t  D  t 
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03  :  Earth  angular  velocity. 

Although  this  paper  confines  itself  to  first  harmonic  approximation,  it  should  be  emphasized  that  the 
results  in  Appendices  II  and  III  can  straightforwardly  apply  to  any  number  of  torque  harmonics. 

Therefore,  an  augmented-order  state  vector  : 


is  defined,  with  vector 
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reflecting  satellite  dynamics  and  vector 

xj  -  I  T, 

reflecting  the  disturbances. 


T  T  T  T  T  1* 
Zo  Xo  Z,  Z,  X,  ‘x. 


By  means  of  relation  (3),  the  differential  equations  governing  vector  x  here-above  are  derived  leading  to 
the  following  augmented-order  state  space  representation  : 
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The  above  augmented-order  model  is  the  model  under  analysis  in  this  paper. 

4.  The  augmented-order  model  and  associated  unobservability  problems 

Let  us  start  with  a  reminder  on  the  Hautus  Lemma  which  will  provide  us  with  some  physical  insight  into 
the  system's  observability  properties. 

Lemma  :  Let  that  time-invariant  linear  system  (S')  whose  state  space  representation  reads  as  : 

<X  -  A'  X 

\y  -  C  X  T  T 

The  pair  (C’.A')  is  completely  observable  if  and  only  if  the  composite  matrix  lA'  -^l  |  C  J  has  full 
rank  for  all  complex  numbers  a. 

If  the  matrix  is  not  full  rank  for  ,  then  the  mode  associated  with  the  eigenvalue  X.  is  not  observable. 
The  dimension  of  the  unobservable  subspace  is  equal  to  the  rank  deficiency. 

Complete  observability  of  the  reduced-order  model  (4),  fit  for  the  no-disturbance  case,  can  thus  be  readily 
demonstrated.  On  the  contrary,  the  augmented-order  model  (5),  fit  for  the  case  of  significant  disturbances, 
appears  as  partially  unobservable. 

As  a  matter  of  fact,  matrix  ,  . 


has  three  double  eigenvalues  which  are  0,j  u  and  -j 
whilst  matrix  C'  -  [C  |  0l 

is  a  rank  one  matrix. 

As  a  consequence  of  the  Hautus  Lemma,  there  is  an  unobservable  subspace  of  dimension  I  for  each  eigenvalue 
0, j  w  and  -J mentioned  here-above. 

Physically  speaking,  this  stems  from  the  fact  that  roll  and  yaw  disturbances  are  of  the  same  frequencies, 
whilst  only  one  measurement  (the  roll  angle) is  available. 
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5.  Estimation  of  the  satellite  state-vector 

The  problem  we  are  interested  in  is  the  construction  of  such  an  observer  as  provides,  through  use  of 
the  sole  roll  measurement ,  the  best  estimate  ( in  a  quadrat  ic  cr  i  ter  ion  sense)  of  t!ie  satel  1  it  c 's  st  at  e  vec  tor  xi . 

The  primary  requisite  for  such  observer  construction  is  to  derive  a  canonical  form  for  o!>scrvab i 1 i t v 
of  the  said  augmented-order  model,  having  in  mind  that  this  model  is  endowed  with  the  following  properties: 

a)  (All  ,  C)  is  completely  observable 
(H)  b)  matrices  An  and  A22  have  no  common  eigenvalue 
c)  matrix  A22  is  diagonal izable 

It  should  be  noted  that  : 

•  verification  of  property  (H.a)  is  straightforward  since  the  reduced-order  model  has  been  proven  comple- 
ly  observable 

•  verification  of  properties  CH.b)  and  (H.c)  are  obvious. 

For  those  systems  which  verify  assumptions  CH) ,  Appendix  11  develops  a  geometric  approach  that  does  away 
with  computation  of  the  observability  matrix. 

The  outcome  is  an  optimal  canonical  form  for  observability  which  may  read  as  : 

;  Xl  “  Xl+(Nl  +  2N2  )  X2 

\  ^  _  oT  „ 
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with  (see  Appendix  III,  section  2,8) 
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The  above  canonical  form  (6)  is  optimal  to  the  extent  that  vector  Xj  is  that  observable  vector  nearest 
(in  a  quadratic  criterion  sense)  to  the  actual  satellite  state  vector  xi . 

Furthermore,  the  assessment  of  the  gap  between  the  actual  and  approximate  state  vector,  say  X|  -  X|  ,  appears 
as  an  explicit  function  of  the  disturbing  torques,  say  : 

Xl  -X,  -  (Ni  +2N2)x2 

It  is  worthwhile  noting  that  the  unobservability  problem  is  decoupled  on  each  one  of  Chose  characteristic 
subspaces  of  the  system  transition  matrix  that  correspond  to  the  different  disturbing  torque  frequencies. 

As  evidenced  in  Appendix  III  (section  2.9),  the  state  equations  for  the  optimal  observability  canonical 
form  appear  as  ; 

r  0-1  To  0  1 
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6.  Optimal  observer  and  quasi-optimal  controller 

These  are  built  after  prior  sampling  of  the  optimal  observability  canonical  form  (7)  to  enable  implemen¬ 
tation  on  micro-processors.  The  simulations  use  a  100s  sampling  period  and  thusters  with  a  AxlO-^Nms 
minimum  impulse. 

The  observer  is  a  plain  Kalman  filter. 

The  construction  of  the  quasi-optimal  controller  is  performed  as  explained  hereinafter. 

Let  ♦  be  the  transition  matrix  of  the  sampled  system. 

First,  an  asymptotic  control  gain  is  computed  by  minimization  of  a  quadratic  criterion. 

Then,  quantity 

is  assessed  at  each  sampling  step. 

If  qj^  exceeds  a  user-selected  threshold  U  (U,  of  course,  must  not  be  less  than  the  minimum  thruster  impulse), 
U^--L>J>X^ 

is  applied  to  the  spacecraft. 
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Nov,  if  is  less  than  U,  no  control  is  applied  on  the  satellite. 

.  A 

Thus,  estimate  is  governed  by  an  equation  of  the  form  : 


U  •  0 
K 


if  q<U 


The  simulations  were  performed  with  a  threshold 
U  -  2x  lO'^Nms 

7.  Simulation  results 

Figures  3  and  4,  attached  hereto,  display  the  observer's  performances  when  the  actual  disturbing  torques 
acting  on  the  spacecraft  contain  no  harmonics  greater  than  one. 

The  actual  yaw  error,  it  must  be  stressed,  is  centered  around  the  systematic  error  (which does  not  exceed  0.12°). 
Figures  5  and  6  display  the  behavior  of  the  controlled  spacecraft  when  undergoing  actual  disturbing  torques 
together  with  the  thruster  commands. 

Roll  and  yaw  errors  are  found  not  to  exceed  0.07°  and  0.21“  r<;spectively .  It  is  noteworthy  that  those  curren¬ 
tly  flying  satellites  which  are  of  the  type  analized  here  present  a  yaw  error  about  0.5°. 

The  thruster  consumption  values  are  quite  reasonable,  say  0.5  Kg  annual  for  the  roll  thruster  as  against 
0.14  Kg  for  yaw. 

The  annual  number  of  thruster  pulses,  say  35,000  for  roll,  11,000  for  yaw  thruster  is  quite  consistent  with 
the  usually  accepted  reliability  data. 

Conclusion 

Through  a  geometric  approach  of  observability,  this  paper  has  derived  : 

•  an  explicit  expression  of  the  systematic  esi.imation  error  induced  by  the  disturbing  torques 

•  an  optimal  canonical  form  for  observability  enabling  the  construction  of  an  observer  which  gives  the 
best  possible  estimation  of  the  spacecraft's  attitude 

•  an  assessment  of  Chose  optimal  performances  expectable  from  the  fine  pointing  mode  three-axis 
stabilization 

•  a  highly  efficient  quasi-opcimal  controller, 

all  of  Che  above  for  a  satellite  devoid  of  yaw  sensor  and  stabilized  by  means  of  Che  bias  momentum  concept. 

It  is  hoped  that  the  method  developed  throughout  this  paper  will  meet  practical  applications  since  it 
appears  as  quite  simple  and  easily  implementable  on  microprocessors. 
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DYNAMIC  EQUATIONS  FOR  A  SATELLITE  PRESENTING  SPINNING  APPENDAGES 
•  Linearization  around  some  prescribed  behavior  • 

The  non-linear  equations  of  motion  for  a  satellite  presenting  rotating  appendages  are  first  established 
through  a  Lagrangian  approach. 

A  simple  combination  of  the  said  equations,  then,  enables  decoupling  of  the  rotational  from  the  transla¬ 
tional  motions. 

Next,  linearization  around  some  prescribed  behavior  is  carried  out 

It  is  assumed  hereinafter,  for  greater  simplicity,  that  the  centers  of  gravity  of  all  appendages  lie  on 
their  rotational  axes. 

1.  Spacecraft  description 

The  type  of  spacecraft  under  consideration  is  comprised  of  (n+l)  parts,  say  : 

•  one  main  body  S 

•  n  rotating  bodies  (momentum  wheels,  solar  arrays,-.)  S*’ ,  l<i<n 

Let  index  i  (l<i<n)  refer  to  all  that  is  relative  to  body  (whilst  body  S  has  no  index). 

Then  the  following  notations  are  adopted  : 

-♦  ^  ^ 

•  Jr*(R,U,V,W)  as  the  reference  frime  of  body  S 

*(R^,U ,  W '■)  as  the  reference  frame  of  body 

•  G  (resp.G*)  as  the  center  of  gravity  of  body  S  (resp.S*^) 

•  m  (resp.m^)  as  the  mass  of  body  S  (resp.S^) 

•  M  as  the  total  mass  of  the  spacecraft 

•  d  (resp.d  )  as  the  vector  RG  (resp.R*-G*^) 

^1  i 

•  D  as  the  vector  RR 

•  J  (resp.J*')  as  the  inertia  tensor  of  body  S  (resp.S*^)  relative  to  frame  (resp..;lf'^) 

•  In*'  as  the  inertia  tensor  of  body  S*  relative  to  frame 

•  (resp  Vjji)  as  the  absolute  velocity  of  point  R  (resp.R  ) 

•  as  the  absolute  angular  velocity  of  body  S 

•  n*  as  the  angular  velocity  of  body  S*  relative  to  body  S 

•  as  the  resultant  external  force  acting  on  the  spacecraft 

•  as  the  resultant  external  torque  (with  respect  to  point  R)  acting  on  the  spacecraft. 

Conventionnally  frame  ^*  is  so  defined  that 

•  point  Rt  lies  on  the  rotation  axis  of  body 

^  i  •  . 

•  vector  W  IS  co-linear  with  the  same  axis 

Hence  : 

where  S’-  is  the  angle  of  rotation  of  body  S*  about  own  axis. 


-  •  .* 
f--:-  - 


2.  Spacecraft  dynamic  equations 

The  following  three  conventions  are  used  hereinafter  : 

P*  as  the  transition  matrix  from  frame  M  to  frame 

X  (resp.  tx)  as  the  components  of  vector  ?  referenced  to  frame  (resp.  .;?*) 
X  as  the  order  2  skew  symmetric  tensor  : 

r  0  -(X)3  (X)j-| 

X-  (X)3  0  -(X), 

L-{X)2  (X),  0  J 


X  -I(X),  (X)j  (X)3l 


is  any  vector  of  IR*  . 


2.1  Pormulation  of  the  Lagrangian  equations 

Let  T  and  T*  be  the  kinetic  energies  of  bodies  S  and  S*  respectively,  and  : 

T  -  T+S  T^ 
i 

be  the  total  spacecraft  kinetic  energy. 

Let  all  vectors  be  expressed  by  their  components  relative  to  moving  frame  it  . 

Let  T  and  T^,  and  thereby  T,  finally  be  computed  as  functions  of  the  said  components.  Then  it  can  be  shown 

that,  relative  to  the  moving  frame  ,  the  Lagrange  equations  for  the  spacecraft  may  read  as  follows  : 

a)  overall  tranelational  equations 
d  t  9T  .  »  3f  - 

dl  -  %x) 

0)  overall  rotational  equations 

I  .  S  dT  ^  5^  3T  g 
dt '^R  3^  ■  "ex)R 
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7)  potationr.t  equation  for  spinning  appen-line  S* 
d  ,3T  ,  3T 

with  fi^  .as  the  resultant  external  torque  (with  respect  to  rotation  axis  of  body  S*)  act im;  on  S*. 
(ex) 

2.2  Computation  of  the  kinetic  energies  and  of  some  useful  quantities  : 

2,2.1  Expressions  of  kinetic  energies  T  and 

Kinetic  energy  T  may  read  as^ _ 

T  =  Vr  m  Vr+  jn  +  m  (1) 

whilst  kinetic  energy  of  body  s’'  appears  as  : _ 

I  ^i*_r  i.,T  i  i.,  .  .  L  i<-.iT  ,i  W  .  i  ir^^T  i7i  i„  .  I 


=  ^5  n,^  *  15  ^  ^d'  (2) 


where  is  the  absolute  angular  velocity  of  body  S*^. 

Uhen  the  vectors  Vj^i  ,  d^  and  the  pseudo-vector  are  expressed  by  their  components  relative  Co  frame 
relation  (2)  here-above  now  becomes  : 


T^*=  Si  ^  lu  d* 


where  inertia  tensor  In  of  body  S  relative  to  frame  .it  is  defined  as  follows  : 

Tn^  =  p‘  / 

Combined  use  of  equalities  : 

V- 

-  n+f? 

A 

and  of  reflation  (3)  here-above  would  enable  kinetic  energy  of  body  S  to  be  expressed  as  a  function  of  V  , 
tl  and  say  : 

-  T^*(v^i(v^,ri).i^(n.i^))  CO 

However,  as  will  clearly  appear  later,  need  not  be  explicitly  developed. 


2.2.2  Computation  of  some  useful  quantities 

The  quantities  :  j.j,i  j.j,j 

’  "an  ’ 

and  : 

d  .3T.  d  ,3T^.  d  ,3T  ±  |1L\  AfUll 

dt'avR*  ’dt'avj,'  ’  dt'an'  ’  dt '  jn*  •  dt ' 

which  further  enable  assessment  of  the  lefthandside  terms  of  the  Lagrange  equations  are  now  computed. 
Such  computation  will  utilize  the  identities  : 

3T*  ait 

ll5  .  +  D*  ill* 

....  .  ,  _  an  ■  ant  8v-i 


ff 


which  are  readily  derived  from  relation  (4). 


One  obtains 


•  •  m  Vj^  -  m  d  n 

•  In  ■ 

•  ^  “  ^R-"  ^  * 

•  d4 

-  mMv^-(D^  +  d^)ni 

(In  -m^O^dM  + 

-  m^(D^+d'’)  Vj^+  (In  -  ra*{D*d‘+3[t  5*^+ D^)  1  n+ In^  w' 

^  •  ’5J\"^(W^In^-In^ 

**  -  n  In  (n  +  ^  W^) 

In  (n+^  wb 


.  --i 
9-  — 


.*  V*  '«*.**' 


(D  .  .  . 

+  lln  ?  +  d^  5’'+ 5'  0*^)1  h 

+  SW  In  -  In‘  W^)n 

+  In 
+  (0^)^  i}*-  In 

-4  l-^^l  -  {  In  (S2  +0*^  «'-)  -  In  wVl> 


2.3  Spacecraft  dynamic  model 

The  results  given  in  sections  2.1  and  2.2  here-above  enable  the  satellite's  motion  equations  to  be 

derived.  „ 

.  md+?m  (D +d  ) 

Setting  :  .  j 

e  M 

and  after  some  mtinipulations,  the  said  equations  appear  in  the  following  forms  : 


<*)  ovevalt  ■translational  aquations 


■  M{d  n+fid  n>  +  M<t+  iiiL}  -  f, 

e  e  R  K  (e 


fi)  overall  rotational  equations 


{  J  +  2  I  In-t-  m"-  d’'  S’-  (D^+  d’^)(D’^+  d‘)l  >  fl 

1 

+  fi{J  +  2  [  In*^  +  m'-  d^  d^)(D*+  d^)l  >12 

+  S  fl"-  <5^  In’--  In’-  S’--  In*^  >  n 

i  (6) 

+  2  In 
^  .  . 

+  2(8^’  In'-  w’’ 

■•ix)R 

T)  rotational  equation  for  spinning  appendage  S*' 


<  In  (rt +8^  W^)+n  In  12+ 8''(S  In  +  In^  H)  w^} 


2.4  Decoupling  rotations  from  translations 

Lefthandside  multiplication  of  relation  (5)  by  (-3),  followed  by  addition  to  relation  (6),  and  then 
by  setting  _ ^ _ 

J„  -  J  +  mJ  3  +  2  I’?  ?-(DSd^)(D^+d^))  (8) 

E  e  e  I 

yield  the  decoupled  overall  rotational  equations  : 

(J„  +  2  Ini)ft+n(j„+2  Ini)  12 

El  El 

+  ?  In^-  In‘  W*-In  W^)  12 

+  ?  ^  ^  In‘ 

1 . 

♦  2(8^)2  In‘w^  ~ 
i  (ex)R 


3.  Lfn««r<zat1on  of  spacecraft  rotational  equations 

Such  linearization  is  performed  around  the  prescribed  spacecraft  behavior. 

3.1  Notations 

All  that  refers  to  prescribed  spacecraft  behavior  is  denoted  by  a  bottom  right  index  o 
Thus  : 

•  R(,t  llj  t  Vj  .  Wj  )  designates  frame  .')f  for  prescribed  behavior. 

•  12^  is  the  absolute  angular  velocity  of  frame 

Moreover,  if  ^  is  any  vector,  °X  denotes  the  components  of  vector  relative  to  frame 


•  '• 


fc  ’  *  w  '  »  ' 

A\‘.*  \*  •, 


A’ •  "  *  ’  '-w'  *  *  ••  •• 


3 . 2  Linearization  of  absolute  angular  velocity 
Suppose  that  frame  remains  close  do 

be  the  three  pseudo  Euler  angles  which  enable  cliaractcrization  of  frame  relative  to  rrarnt*  /f,,. 

Let  P  be  the  transition  matrix  from  frame  to  frame  .  P  can  straight  forward  1  v  be  exi>rt*ssed  .is  : 

o"  ^ 

Then  :  p-i,  I_0 

o  — 

and  for  any  vector  X  : 

X=(I-^)°X 

which  finally  leads  to  :  X  =  °X +  °X  0  (10) 

On  the  other  hand,  absolute^angular  velocity  of  frame  equals  the  summation  of  the  absolute  anqul, 
velocity  of  frame  say  and  the  angular  velocity  of  frame  jf  relative  to  frame  ,  say  >2'  : 

lf=nl  +  I?"  (11) 


since  (cf.  (10)) 

n'=j_ 

relation  (11)  leads  to 


fl  =  °%  +  6  n 


3 .3  Linearization  of  overall  rotational  equations 

Substituting  for  Cl  in  relation  (9)  yields,  at  first  order  : 

(Jg  +  2  In  )  5  {°n^(Jg+ ?In  )-(Jg+S  Inh°nQ+ 2  In  -  In  w’'- In  ^  *  ^ex)R 

where  : 

To  -  -Oe-? 

-  °^(J^>2lnS°% 

-  ?  0^(W^  In  -In^  W^-In’^W*')  °Cl^ 

-  i}u'^ 
i 

-  S  (d'-y  In^ 

1 

The  torque  v„  is  the  summation  of 

^  (ex)R 


"  the  outer-space  disturbing  torques,  say 
•  the  control  torques,  say 


By  splitting  the  control  torques  as  follows  ; 


and  selecting 


\  “  oR  ■^“r 


one  may  derive  the  linearized  form  of  the  overall  rotational  equations,  say  : 

(J„+  ?  In)  aft+ t°S  (J_+  I  Inh-(J^+?  Inh°nn+  ?®*(w‘ln^-In  w"-In"wS>ail  =  T  +u„  (13) 

t.£  Ot,£  ^1*^1  PiR 

Now  let  the  prescribed  behavior  be  such  that  =»  0 

o 

and  let  X  be  defined  by  the  relation  : 

X  =(J„+  ?  In)"'  <°Cl„(J^*  ?  In)-(J_+?  Iih  +  ?  In-  Tn’^w'^-In^  wh>  (14) 

bi  ohj^  bi 

Substituting  (°CIq9  +9)  for  an  in  relation  (13)  finally  yields  the  expression  of  the  satellite's 
linearized  equations  of  rotation  : 

i.  -  -  [  °Slo+ X  li.- [  X  +(Jg+r  In)-'  Tj^+(J|,+  S  In  )"'  (15) 


r . :0': 


•■-■•‘.■-I 


»  • 


(15) 


APPENDIX  II. 


LINEAR  SYSTEMS  AFFECTED  BY  DETERMINISTIC  DISTURBANCES  : 
•General  results  relative  to  observability  properties- 


This  appendix  aims  at  deriving  an  observability  canonical  form  for  time  invar  Lant  1  inear  systcc  •  the  st.it  e- 
space  representation  of  which  may  read  as 


[ij-r:  :::]  [:] 

,.,c  oQ 


Au(C,«)  ,  AiiCC.m) 
Aj’(m,m) 


and  which  are  endowed  with  the  following  properties 

I  a)  (All  >  C)  is  completely  observable 
(H)  b)  matrices  An  and  A22  have  no  common  eigenvalue 

f  c)  matrix  Aj:  is  diagonal izable 

Such  systems  and  properties  will  be  respect ively  ref erred  to  as  (S^)  and  (H)  hereinafter. 

It  is  demonstrated  that  a  geometric  approach  does  away  with  computation  of  the  observability  matrix. 

Furthermore  the  unobservability  problems  are  spl it  onto  the  different  eigen-subspaces  of  matrix  A22  . 

1.  Preliminary  observability  theorem 

Theorem  1  :  Let  that  time-invariant  linear  system  (S')  whose  state-space  representation  reads  as 


(s  )  I 


X  =  A'  X 
Y  =  C  X 


Nowi  let  P'  ,  defined  as 


P'(x)  =  .n,  (X'.-x)*^! 

m  1=11 


be  the  minimal  polynomial  of  A',  and  let  Nl  be  the  characteristic  subspace  of  A’  relative  to  the  eigen¬ 
value  X;  .  '■ 

X 

Then  the  unobservable  subspace  for  the  system  (S')  appears  as 

P' 

■*'  ■  .i,  'i 

1=1  , 

with  :  v:  =  {n:  n  Ker  C  n  Ker  C’A'  O  ...  n  Ker  C  A’^^  > 

Demonstration  of  that  theorem  may  be  found  under  reference. 


2.  Characterization  of  the  unobservable  subspace  for  system  (S  ) 

9 


Such  characterization  is  performed  by  setting 


C  =  (C  0  ] 

and  by  straightforward  application  of  the  theorem  here-above. 


2.1  Notations 


•  P(A')  is  the  spectrum  of  A' 

•  ®(Aii)  =  ;  I  <i<  p)  is  the  spectrum  of  An 

•  P(An)  ={/!;;  1  <  j  <  <!)  is  the  spectrum  of  A22 

P  ^  0. 

•  p„(x)  =irj,(X.-x)'^  is  the  minimal  polynomial  of  An 


♦  Ni  -  Ker(Aii-X£  If/^  is  the  characteristic  subspace  of  An  relative  to  the  eigenvalue  X 

•  “  Ker(A22-/.<j  Im)  is  the  eigensubspace  of  A22  relative  to  the  eigenvalue  Pj  (cf. assump¬ 
tion  (H.c)). 


2.2  Characteristic  subspaces  of  A' 

Readily  we  have  :  o(A' )  =  p(Aii  )  D  (7(A22) 

Then  let  N^'  (l<i<p)  and  Nj^(l<j<q)  be  the  characteristic  subspaces  of  A'  relative  to  the  eigenvalues 
Xi  and  lij  respectively. 

These  subspaces  can  easily  be  demonstrated,  since  An  and  A22  have  no  common  eigenvalue  (cf .assumptlon(H.b)), 
to  appear  as  :  {(xi,X2)  :xi£  N.  and  X2  =  0>  l<i<p 

Nl=  {(xi  ,X2 )  :  xi  =  -  F.  X2  and  xi^  E.}  1  <  j  <  q 
with  :  J  J  1 

Fj  =  (Aii  -/L  Ij)  '  Ai2 

Correlatively,  the  minimal  polynomial  of  A'  is  expressed  as  : 


r- •'• 


i  •  » 


¥.t 


■.n' 


‘4: 

^v. 


8-14 


which  implies  that  the  coefficient  /3.'  ; 

•  equals  Pi  if  belongs  to  o(Am1 

•  equals  I  if  belongs  to  o(A2j) 


2.3  Unobservable  subspace  for  system  (S  ) 


Let  : 


Then  obviously  : 


V.'‘=  {  N''n  Ker  C'  n  Ker  C  A'  n  ...  O  Ker  C  >  1  <  i<p 

1,  ^ 

V.'=  {  N.''n  Ker  C  }  1  <  j  <q 

J  J  ^ 


(xi,xj)e  VjI  «  xiG  {Nj^n  Ker  C  n  ...  O  Ker  C  A,7  and  xj  =  0 

Since  (An.C)  is,  by  assumption  (H.a),  completely  observable,  the  theorem  in  5I  provides  the  demonstration 
N.  n  Keren...  n  Ker  =  0 

which  results  in  the  affirmation  that  : 

V.'=  0 
1 


(xi ,  xj)  e  V/  ■»  I  Xi  =  -Fj  Xj 
CFjX2  =  0 


Similarly  : 


X2  e 

«»<xi  =  -F.X2  and  xi  e  (e.  n  Ker  C  F.)  > 

J  J  J 

The  following  theorem  can  now  be  spelt  out  : 

Theorem  2  :  Let  matrix  Fj  and  subspace  Vj  be  respectively  defined  as  follows  : 

Fj  =(Aii -hj  If )■' Ai2  '^j^q 

Vj  =<(xi,X2):  Xi  =  -FjX2  ;  X2  e  Ej  n  Ker  C  Fj>  l<j<q 

Then  the  unobservable  subspace  for  the  system  (S  )  appears  as  : 

q  ® 

V-  2  V. 

i?.  ^ 

3.  Derivation  of  an  observability  canonical  form  for  system  (S  > 

3.1  Reminder  * 

Let  E*  be  the  dual  of  E.  Let  be  the  annihilator  of  the  unobservable  subspace. i: 

,4/-^=  {^e  E*  ;  (p(x)  =  0  VxS.d'} 

1  T 

Let  any  element  of  the  dual  space  be  expressed  by  a  row  vector  such  that . i  may  read  as  any  matrix  N 
with  independent  rows  and  satisfying  the  equality  : 

X  =  0  V  X  e .  V 


Then  an  observability  canonical  form  is  obtained  by  setting 


T 

X  -  N  X 


3.2  Characterization  of  the  annihilator  i  ^  of  .4 

Let  the  eigenvalues  U.  be  ordered  in  such  a  way  that 
J  Vj,(0  if  j<K 


Then  theorem  2  gives  us  : 


'3  ' 

Vj  =0  if  K<j<q  . 


.4=  2  V. 

J 

J’l 


Now,  let  Q.  be  the  projection  operator  on  E.  along  the  direct  sura  2  E.. 

J  J  ®  t 

The  following  is  then  readily  demonstrated  : 

K  K 

(xi ,  X2)S  .  V  <»  {  Xi  =  -  .2  F.  Q.  X2  and  X2e  2(E.nKerCF.)> 

3=1  3  3  .©  3  3 

since  :  K  K 

S  **  ■Cx2  e  E.)  and  (Q.X2eKerCF.  ¥  j  I<j<K)} 

’  ’  .®  J  3  3 


3  =  1 


3  =  1 

»  C  F.  Q .  X2  =  0  V  j 
3  3 


.-■•J 

••'J 

■  -J 


■>  'J 

'•  T 

.  M 


■r  •.*  %•  V 


V.V  .N 

I  '  ^-0] 

.'-  v-  .s  .■=, 

t . •< 


I  <  j  <  K 


X- 1  s 


we  finally  obtain 


(Xl  ,  X2  )  G  ,  1 


„.l 


K 

F.  Q. 
J“1  J  J 

K 

I  -  .2  Q. 

m  j-1  J 

CFiQ, 


'5k 


□  -« 


Then,  the  annihilator  .V  of  .  V  is  characterized  by  the  independent  rows  of  the  matrix  hereabove. 


3.3  An  observability  canonical  form  for  system  (S  ) 

T  T  *  .  . 

Let  Sg  and  S.  (l<j<K)  be  respectively  the  matrices  built  with  the  independent  rows  of  the  matrices 

(I  -.2,  Q.)  andCF.  Q.  (l<j<K). 
m  j-1  J 

Now  we  shall  demonstrate  the  linear  independence  of  chose  subspaces  of  E*  which  are  respectively  generated 
by  the  sT  (0<j<K)  rows, 

5  T 

Let  s?  be  any  element  of  (0<j<K). 

K 

2.  a.  st  “  0 


Then,  the  relation  : 
reads  : 


J-0  J  J 
K 

.2  a.  s^(x)  ”0  V  xG  E 
1-0  J  J 


Now,  since  for  xGE.,  we  have  : 

s.(x)  -0  V  j  i. 

we  derive  from  the  preceding  relation  : 

a.  s*(x)  -  0  V  xG  E. 

i  i  1 


Finally,  we  obtain  : 


a.»  0 
1 


a.  •  0 
1 


I<i<K 


0<j<K 


l<i<K 


We  can  now  set  the  following  theorem  : 

Theorem  3  :  With  the  above  notations!  an  observability  canonical  form  for  system  (S^)  may  read  as  ; 

jll  ''j  '5j> 


/x,‘ 

Xi+  < 

T 

jX,- 

( 

4.  Derivation  of  an  optimal  observability  canonical  form  for  system  (S^) 

We  shall  confine  ourselves  to  the  case  of  periodic  disturbances. 

The  eigenvalue  of  matrix  An  can  therefore  be_wTicten  ; 


We  set 


U  »  1  CJ  U  m  CJ 

j  J 


G.  -  F.  Q .  1  <  j  <  K 

111 


G  -  .2  G.‘ 

J-1  J 

and  we  denote  by  'A  and  *A  respectively  the  real  and  imaginary  parts  of  the  complex  matrix  A. 

With  the  above  notations,  the  observability  canonical  form  derived  in  theorem  3  (see  section  3)  may  read  as 

T  — T 

j  Xl  ■  Xl  +(G  +G  )X2 

i,  A’  s7.  c'-.’ 

1-1  J  j 

T  T 

be  any  projection  in  E*  of  G  onto  the  subspaces  Sj  . 

Then,  any  form  of  the  type 

sJ  xj  0<j<K 

will  be  canonical  for  observability. 


Our  purpose  Is  to  utilize  a  priori  knowledge  of  the  disturbances  to  calculate  the  A:  matrices  in  such  a 
way  as  to  minimize  the  difference  (l^i^S),  thus  leading  to  the  criterion^: 

J.-E  f  lira  -  dt  > 

i  t-.«>tolli  III 

where  E{*)  denotes  the  mathematical  expectation. 

T 

After  a  few  manipulations,  matrix  A,  may  be  shown  as  : 


a!-(s.V!'  g. 

1  J 


where  semi-norm  M.  is  expressed  as  : 


I  'Q.  xi  I  [  'q.  xj  l^dt  [ 


and  where  ^  y  g*  „ 

J  Mj  J  J  J  J  J 

denotes  the  pseudo  inverse  of  the  matrix  S.  for  the  semi-norm  M. . 

1  J 

Now,  we  proceed  with  the  computation  of  Xi . 


Keeping  in  mind  Chat  ; 


leads  to  : 


Che  following  identity  holds 


j^(C.  XI )-  P.  G_,  XI 

i(e'^x,)  -  ?  p.(cT  -  a'[  sT)xi 
at  j  1  )  1  i 

X,-  AiiX,*  A„  xj-  E(A„ -P  I XcT-zf.  sj)xi 
j  J  *  J  J  J 

-  j:(a„+p  i^xcT-a^  s'1')x, 
j  J  '  J  J  J 

(An-Pj  I,)G%(A,,-Pj  t,)R  Qj 

“  AijQ^ 

(A,,-P.  IjXgT-/?  sT)-  A,a  Q  -AijQ,  [(S.)*]’’'  sT 
J  JlJ  J  JllfiJ  J 


Finally, we  have 


Xi”Aii  Xi+  All  {  I  -  ?(Qi  +  5. )  }  xi  +Aij  {  ?  Q.KS.  Xj,  )  ^  sT  J  Xj 
“  J  J  1  J  J  J 

Mu  <  2  5.1(5.)*  5!>xa 

J  J  J  J 


Considering  the  isomorphism  of  algebra 


-*  -^20 


A-‘a*  j'A  ^»f(A)' 


li  -:tl 


where  denocesthe  algebra  of  square  matrices  n  n  on  the  field  K,  gives  us  ; 

Theorem  A  :  The  optimal  observability  canonical  form  for  system  (S^)  appears  as  ; 

I  X|  “  xt  +  2  2  N .  xj 

1  T  J 

j  Xjo  “  So  X: 

VS*’ 

xa 

N.-  'gT-CgT  I ’gTiks:)’  f  fSl 

11  1  1  IM. 

-i-[? :.] 

1 

r's.  -'s.i 
s:-  J  J 
J  L's.  's.J 

1  1 

Theorem  3  :  The  State  equations  of  the  optimel  canonical  form  may  read  as  : 

I  X,-  An  X,  +  A,a  B  X,o*2A,a  j?  I  'q.  ’  'q.I 

)  Xao  -  A,'j  X^  '  ’  j 

)  ■X2j--‘i’X2j 

. . .  ...  '  *"23-  -i  'X2j 


where  B  is  given  by 


I  I  -  2  2  'q  I-  B  si 
m  J 


and  Al  is  the  matrix  of  the  restriction  of  An  to  the  subspace  2  E.  . 

^  i  -K*!  I 


S-l  7 


I  'jL « i  »>  »i 'I  »'.■ » 1.  »;v»  ■- 


APPENDIX  III.  LITERAL  CALCULATIONS 

This  appendix  develops  all  literal  calculations  required  to  obtain  the  linearized  dynamic  equations  of 
the  spacecraft  as  well  as  the  system's  optimal  canonical  form  for  observability.  It  directly  applies  the 
results  of  the  foregoing  two  appendices  to  the  specific  satellite  case  considered  in  the  paper. 


1.  Spacecraft  linearized  dynaaic  equations 
1 .1  Spacecraft  configuration 


The  satellite  consists  of 

■  one  assumedly  rigid,  solid  body  S 

•  one  momentum  wheel  S* 

•  assumedly  rigid  solar  array  wings  S’ 

The  wheel  s'  and  the  panels  rotate  about  axis  V  of  frame  M  . 

Transition  matrix  from  frame  #  to  frame  reads: 

[cos  0  sin  1 

0  0  0 

-sin  ®2  0  cos  ^2  J 

As  a  simplification,  the  centers  of  gravity  G,  g'  and  G^  are  assumed  to  be  aligned. 


Let  Ge  be  the  center  of  gravity  of  the  whole  spacecraft. 
The  vectors  gTg  - 

^  e 

Ge  G'-tf-^e 

g"^’.  dg 

and  the  inertia  tensors 

J  ,  j'  ,  j’ 

are  selected  as  equal,  respectively,  to  : 


0 

d“dg 

0 


GgG^ 


0 

0 

0 


for  the  vectors, 
and 


II 

hx 

Ip 

'^x 

J- 

I’ 

J‘  = 

hy 

J^  = 

Ip 

Is. 

hx. 

L  ipj 

for  the  inertia  tensors. 


1 .2  Prescribed  behavior 

First,  with  the  classical  conventions,  the  instant  local  orbital  frame 
.  i^L  .  ^L  .  ^l)  is  defined  : 

•  Wj^  :  yaw,  along  the  downward  geocentric 

•  !  roll,  within  orbit  plane,  such  that  ^L  »  with  oriented  in  the  same 

sense  as  velocity  of  Gy 

•  Vl  :  pitch  such  that  ®  direct  orthonormed  frame. 

Relative  to  inertial  frame  ,  frame  rotates  about  V,  with  angular  velocity  (w  modulus  of  earth 
rotation  velocity). 


Spacecraft  frame  ^  is  the  direct  orthonormed  frame  formed  by  the  principal  inertia  axes  of  main  body  S. 
If  the  prescribed  behavior  is  fulfilled,  spacecraft  frame  ^  and  local  orbital  frame  are  coincident  at 
all  time,  i.e.  ^  .a  ^ 


The  three  pseudo  Euler  angles  that  enable  transition  from  frame  to  frame  appear  respectively  as  : 

1-1  ^,9.^  JT 

^-roll 
9  -  pitch 
'll  •  yaw 

Then,  for  the  prescribed  behavior  : 

Of 


1 .3  Computation  of  ( Jg  +  2 in') 
Let 


and  X 
a(t) 

b(t) 


(see  appendix  1,  section  3,3) 

-di+md’  )'*'(hx+ mi(di)^+%l(lpx+lp2)-(lp2-lpx)  cos(292  )) 


sin(29p  ) 


c(t)  -  I2  -  (I3  +  md*  )  +  (hy- hx  -  mi{d')^)->iI(IpX''' Ipz)“  (IpZ'Ipx)  cos(2^)l 

e(t)  -(Ij  +  md’)  +  (h^+mi(d')'-)+ \[(IpX+ Ip2)'''(Ipz- Ipx)  co8(29j)] 

f(t)  -(I,  +md^-  I2)  +  (h,  +mi(d')2  -hy)+  >i  [(Ipx-^  Ipz)  +  (IpZ-Ipx)  cos(292)I 

g  -  l2'thy  +  IpY 
H  -  hy 


8-18 


r 


-b  [«*J(f-e)  +H  ] 

0 

-  [w(b^-a  f)-HAl 


[-  tJ(b^  +  c  e)  +  H  e  1 


-b  [aj(a+  c)  -Hj 


1 .4  Linearized  roll-yaw  equationa 


Let  Tz  and  Tj(  be  respectively  the  components  on  the  yaw  and  roll  axis  of  th  se  disturbing  torques  which 
affect  the  satellite. 

Setting  H  e 

*  ae  -  y 
Hb 

y " 

Ha 

^  "  ae  -  bJ 

provides  the  linearized  roll-yaw  equations  with^the  form  : 

J  m(03  y  l?-(‘Jy)'/'+xi'-§T2+gTjj 
I  — (OJ  y)v>  -  z'P  +(<o  2)^  -yii  +|T2 

1 .5  Numerical  values 

The  following  values  were  adopted  in  all  numerical  applications  t 

Ii"  Ij  "  Is  •  1 ,000  Kg.m^ 

h^s  0 

hy-  0.9625  Kg.m' 

IpX*  300  KgV  Ipj -4,300  Kg. Ip2- 4,000  Kg. 

H  -  hy  W,  -  50  Nm.s 
<0-  7.27x10“*  rad/s. 

2.  Optimal  canonical  form  for  observability 

Matrix  Ajj  has  three  double  eigenvalues,  which  are 

Pi  -  0  Ms  -  j  «  Pi  -  -j 

We  shall  denote  the  three  relative  eigensubspaces  by  Ei,E2  and  Ei  respectively. 

Matrix  Qi  of  projection  on  eigensubspace  Ei  reads  : 


Matrix  Qi  of  projection  in  eigensubspace  Ei  reads 


Straightforwardly,  the  projection  matrix  on  eigensubspace  Ei  reads  as  Qi . 
Computation  of  matrix  (Aii-pla)"'  by  Leverrier  -  Souriau' s  algorithm  yields  : 

fAii  -  D  r'  - _ - 

^  '  P  i'  dop<  + d|  p3+ di  pi  +  dsp*  d4 


X  z  -  y*  -  o;  z 

y 

—  CJy 

X 

0 

-  (Jz 

-CJ(y^-  X  Z) 

—  CJy 

-  CJy 

-z 

X  z-  y*-<<ix 

-y 

_w(y’-x  z) 

.  CJy 

0 

«CJx_ 

“  0 

-CJz 

-<0(yl-X  Z) 

-  CJy” 

CJ*(/-X  z) 

0 

0 

0 

«(y^-  X  z) 

.  CJy 

0 

-Wx 

0 

0 

<«J^(y*-X  z) 

0 

,S- 1 ') 


.  T  T 

2.1  Computation  of  G,  and  S, 


gJ  -  F,  Q, 
sJ-Cfi  Qi 
Fi  “  All'  Ai2 


Knowing  that 


with 

we  readily  obtain 


'  Si  =  C  Fi  Qi  =  [  0 

2.2  Computation  of  ‘gJ,  ‘s?,  ^sJ 

Setting  ; 

A  3  y  <o 

B  =  y’  -  X  z 
C  -  X  <*>+(x  2  -y*  ) 
D  .  z  CJ+  (x  z  -y^  ) 
E  >  +  x  +  z) 


and  knowing  that  : 

with  ; 

we  readily  obtain 


■g?-  .■ifeCFjQi) 

’G?-  .>m(FjQj) 

*S?-  d?e(CFjQi) 

^sl-  .^mCCFjQi) 

F2”(Aii-  jtJ  u)"'  All 


0 

-ACJ 

B 

CW 

0 

0 

-Bu’ 

-AW 

0 

CW 

0 

D« 

0 

-AW 

-B 

0 

0 

Dco 

BW^ 

-AW 

0 

BOJ 

A 

0 

0 

-ACJ’ 

BW 

Cw’ 

0 

0 

0 

-D 

-BW 

A 

0 

DCJ* 

0 

-AW* 

-BW 

0 

-AOJ 

B 

CW 

0  1 

0 

BW 

A 

0 

-c  ! 

2.3  Computation  of 

Assuming  the  expectations  of  the  amplitudes  of  sine  disturbing  torques  to  be  knovm,  i.e. 

E{jTzJ^  }  -  7’ 

E{|TjM-6’ 

yet  with  no  assumptions  as  to  their  phases  (probability  uniform  on  [0,2ir)),  matrix  Mj  : 

Ml-  Ef/*^(  'Oixill  'Qixil^  dt} 

may  read  as  : 


now  :  _ 

-  (Sr  M,'  Sj')*  Si'^  Mj’ 

T 

We  shall  first  compute  the  term  (S,  M,'  S^)*  . 

We  have  :  r  t  tT 

T  '87  ’S7  TMi 

Sr  Mi  Si-  ,  T  T 

-’s,‘  'si  LO 

Hence  : 


-,T  2u'((a'+B’)7'  +  c'  6Mr' 

{2HE)'  Lo 


•.  \  '  •- 


IM 

-.-.Vi.-.  .-.J 

.'.-•.•A 

*-1 


%*  s’  •. 

V-  •  '  • 

s''  ■%"  \ 


N."  •  '  *.*  ^  • 

V*  •  *  s’  '  * 
V  V  .  .• 


. 


2.8  Optimal  canonical  form  for  observability 
This  may  read  as 


(X|  »  xi 
X21  -  S? 

j  X2 

'  ^Xj2  -  Xj 


X,  +  (N,  +  2N2)X2 
„T 


with  (see  sections  2.5  and  2.7) 


Ni  -f  2N2  ■ 


and  with  (see  sections  2.1  and  2.2) 


(0 

1  0 

0 

0 

0l 

‘s?  .-i- 

^  2HE 

[0 

0  -At'J 

B 

CW 

0l 

.-i- 

^  2HE 

[0 

0  BOJ 

A 

0 

-cl 

{l-f}B02^ 


{f-UB 
-1  }A<J 


2.9  State  equations  for  the  optimal  observability  canonical  form 

For  their  deterministic  part,  and  using  the  results  of  section  2.6,  these  equations  appear  as  : 


.  TT  (yA7^+xC«^)w  -yBT^cj  f 'Xj, 

Xi  •  All  Xi  +  X2t  +  f  '  ^ — 5— T - ,  ,1 

0  „  0  [2„ 


X21  •  0 

'X22  -  -  W  »X2, 

’X22  -  ‘J  ‘X22 


0  0  L'X22-I 

“(z  Al’+yC  S‘)W  zBT'w 


MULTIFUNCTION  SPACECRAFT  ATTITUDE  ESTIMATION  AND  NAVIGATION  SYSTEM 


Dr.J.C.AMIEUX,  B.CLAIIDINON 
MATRA  Space  Branch,  VELIZY 


- ^5»The  primary  function  of  a  spacecraft  attitude  control  subsystem  is  the  attitude  determination 

and,  more  generally,  the  state  estimation  (attitude  of  the  main  body,  appendages  and  flexible  modes). 

The  so-called  "optico-inertial  concept"  is  first  described  with  application  to  a  number  of  modern 
spacecraft;  an  example  of  implementation  using  space-qualified  microprocessors  is  given  in  detail; 
the  state  estimation  of  a  flexible  spacecraft  is  then  considered,  a  technique  which  can  be  readily 
implemented  on  existing  hardware. 

The  extension  of  this  concept  to  autonomous  orbit  control  of  an  orbiting  spacecraft  is  then 
considered  for  future  development.  ^ 

INTRODUCTION 

The  attitude  control  requirements  of  new  coming  spacecraft  on  the  one  hand,  the  qualification 
for  space  of  inertial  class  gyroscopes  on  the  other  hand,  have  led  the  designer  to  implement  the  so- 
called  optico-inertial  concept.  It  is  based  on  the  optimal  mixing  of  sensors  having  different  spectral 
characteristics  :  gyroscopes  with  a  high  bandwidth  low  noise  output,  corrugated  by  long-term  drift, 
and  optical  sensors  with  comparatively  higher  noise,  lower  bandwidth  but  no  drift. 

The  technique  implements  basically  the  Kalman  filter  theory,  which  has  been  made  possible  by 
the  qualification  of  spaceborn  computers  and  even,  as  will  be  shown,  by  microprocessors. 

The  applicability  of  the  concept  seems  only  limited  by  its  relatively  high  cost  (development 
cost  but  also  weight,  reliability  and  power  requirements  on  the  spacecraft).  As  a  result,  this  approach 
is  used  whenever  required  by  the  mission.  As  examples,  and  historically,  the  first  missions  to  implement 
the  technique  were  Che  astronomical  sources  observation  (OAO,  lUE,  EXOSAT,  and  now  HIPPARCOS) . 

The  second  missions  requiring  high  angular  rate  stability  are  the  Earth  observation  missions 
(LANDSAT,  SPOT).  The  third  class  of  missions  is  the  telecommunication  mission  from  the  geostationary 
orbit,  especially  when  large  solar  arrays  are  implemented  to  provide  the  high  power  required  by  the 
payload,  inducing  large  perturbating  torques,  incompatible  with  the  more  commonly  used  techniques  based 
on  angular  momentum  conservation. 

Now,  in  order  to  increase  the  ratio  of  the  payload  mass  to  the  service  platform  mass,  light 
structural  elements  are  used  resulting  in  very  flexible  spacecraft,  especially  for  the  solar  arrays  but 
also  large  antaenae  and  booms.  A  spacecraft  state  estimation  is  then  required;  it  is  defined  as  the 
main  body  angular  position  and  rates,  steerable  appendages  positions  and  rates,  and  flexible  modes. 

The  estimation  of  these  variables  is  obtained  by  digital  processing  of  high-bandwidth  detectors  outputs, 
(gyroscopes, relative  motion  detectors,  infrared  and  radio  frequency  sensors). 

The  MATRA  Space  Branch  has  been  involved  in  the  development  of  this  technique  since  1977,  in 
various  research  and  development  programs  with  C.N.E.S.,  E.S.A.  and  INTELSAT  (SMAOII,  SIOS,  IASS  and 
lAOES  contracts),  and  in  spacecraft  attitude  control  development  for  C.N.E.S.  and  E.S.A.  (SPOT  and 
HIPPARCOS). 

The  research  and  development  programs  now  being  conducted  are  oriented  towards  the  rendez-vous 
and  docking  techniques  between  a  chaser  satellite  and  a  target  satellite,  both  in  low,  transfer  and 
geostationary  orbits.  As  a  candidate  for  these  applications,  we  are  now  thinking  of  increasing  the 
autonomy  of  the  orbiting  spacecraft  for  navigation  and  orbit  control  function.  This  leads  to  the 
"autonomous  station  keeping"  of  a  telecommunication  satellite  and,  more  generally,  to  autonomous 
spacecraft  navigation  as  an  extension  of  the  basic  concept. 

OPTICO-INERTIAL  CONCEPT  AND  ITS  GENERALIZATION  TO  SPACECRAFT  STATE  ESTIMATION 

As  shortly  exposed  above,  the  so-called  "optico-inertial  concept"  is  based  on  optimal  mixing  of 
sensors  outputs  with  different  spectral  characteristics. 

The  information  gained  on  a  number  of  flight-qualified  sensors  (infrared  Earth  sensors.  Sun 
sensors,  star  scanners,  star  trackers,  radiofrequency  sensors,  gyroscopes,  accelerometers  and  resolvers) 
allows  to  define  two  broad  classes  of  output  spectra. 

Figure  I  shows  the  output  spectrum  of  most  optical  sensors,  modelled  as  a  colored  white  noise 
(i.e.  white  noise  filtered  at  some  cut-off  frequency  and  sampled).  Figure  2  shows  the  output  spectrum 
of  most  inertial  components  (gyroscopes  and  accelerometers),  modelled  as  a  random  walk  process  (low  fre¬ 
quency)  and  a  white  noise  filtered  at  some  frequency  (usually  3  to  10  Hz). 

The  mixing  of  these  pieces  of  Information  is  realized  by  an  on-board  Kalman  filter,  implemented 
in  the  software  of  the  on-board  computer.  The  optimal  filtering  approach  is  efficient  in  this  application 
owing  to  the  fact  that  both  the  dynamical  model  of  the  spacecraft  and  the  sensors  noise  spectra  are 
accurate,  a  rarely  encountered  situation. 
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GENERAL  KINEMATIC  MODELIZATION 

The  S/C  rate  on  gyro  sensitive  axis  is  : 


to  «  0)  +  D  +  b , 

—  -in  —  —I 


where 


is  a  white  centered  noise 

E(b,.b/)  =  Q,  6(t-T) 

is  the  gyro  drift  modelled  by 

*  b-  (random  walk  process) 

^  T 

*  white  centered  noise  :  E(b^.b2  )  -  6(t-T) 

*  gyro  rate  output. 


T  Sgacecraf t_angular_rates_model 

When  a  redundant  set  of  gyros  is  used  w  =  M  .  I 

—HI 

where  fi  is  the  absolute  rotation  vector  in  body  axes. 
Therefore  we  obtain  : 


n  =■  M'  0)  +  M’D  +  M'b, 

—  -m  —  — 1 

where  M'  = 


Y  +  D'  +  b- , 

measurement  vector  in  satellite  axes 
M*D  :  imaginary  drift  such  that 
D*  =  M*D  =  M'b^  =  b'2 

E  (b'2  b’2^)  =  M'  M’’"' 

M'b|  :  E  (b’ I  b’ =  M' 


The  model  becomes 


p 

= 

yl  + 

dt 

+  VII 

q 

- 

y2  + 

d2 

+  VI2 

r 

- 

y3  + 

d3 

+  VI3 

dl 

V21 

d2 

V22 

d3 

= 

V23 

Now,  for  any  application,  we  have  to  derive  the  kinematic  equation  relating  the  absolute 
rate  vector  to  the  angular  rate  of  the  spacecraft 

n  -  M  £ 

Introducing  this  equation  in  the  previous  set  leads  to  the  usual  state  space  model 

|X  -  +  Y  +  V  . 

T  I;gw_freguencx_sensor8_model 

The  reference  sensors  are  modelled  by  a  discrete  process  : 

I^K  ■ 

where 

Z  is  the  sensors  output  vector 
X  is  the  spacecraft  state 
V  is  a  white  noise 

®°  E  (V  .  V^)  -  R  6(t-T)  . 

T  Kinematic_f ilter_e9uations 

The  linear  Kalman  filter  in  its  discrete  form  is  processed  any  time  a  sensor  output  is 
available.  This  method  avoids  any  matrix  inversion;  the  filter  routine  is  used  sequentially 
and  the  small  delay  induced  in  the  processing  does  not  usually  lead  to  significant  errors. 

Filter  equations  p— * - - - = - - 

\+l/k+l  "  *k+l/k  *  'Sc+I  ^^+1  ■  ”  \+l/k^ 

\.|/k  -  n/k  *  ™k 

•Sc.l  *  V./k  ("Vl/k  *  Vl>'' 


k+1 /k+l 


-'S.*!  ’’k.l/k  *  "Sci 


V  , 


DSP 

V  Random  walk 

\  process  Oi 

Filter  and 

\  Filter  and 

sample 

\  White  noise  sample 

characteristcs 

\  /  characteristics 

Fig  1- optical  sensors  SPECTRUM 


Fig 2-  INERTIAL  RATE  SENSORS  SPECTRUM 


Fig  3  -  BLOCK  DIAGRAM  OF  THE 
STATE  ESTIMATION  PROCESS 
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GENERAL  DYNAMIC  MODELIZATIO,. 

T  A  dynamic  model  of  the  complete  satellite  is  obtained  usually  hy  Lht-  mudal  rrprfsi-nt  a  t  i  ini , 
resulting  in  a  linear  approximation  of  the  following  form  : 


X  =  AX  +  B  (u  +  D) 
Y  =  CX 


with  Qj  ,  as  rigid  body  variables 

=  (u  . . .  u  > 

1  m 

^  is  the  torque  command  vector 
is  the  disturbing  torques  vector 
is  the  sensor  output  vector 


T  The  state  estimation  filter  has  the  same  structure  as  a  Kalman  filter  (non-minimum  order  observer). 
Due  to  real-time  constraints,  a  reduced  dynamic  model  is  used  (only  modes  in  or  close  to  the 
control  cut-off  frequency  are  relevant),  and  constant  gains  are  selected. 

The  state  observer  takes  the  following  form  : 

^  =  Vk-1  ^  l  (Y^  -  c 

^/K-1  '  ’Sc-l  *  ^  “k-1 


3.  BLOCK  DIAGRAM  OF  THE  STATE  ESTIMATION  PROCESS 

The  block  diagram  of  the  complete  state  estimation  process  is  depicted  in  Figure  3,  where  the 
inner  loop  refers  to  the  dynamic  filter  for  short-term  control  of  the  spacecraft  and  the  outer 
loop  mainly  updates  the  inertial  reference  drifts. 


ILLUSTRATION  OF  THE  CONCEPT  :  THREE  CASE  STUDIES 

This  concept  has  been  studied  through  three  different  research  and  development  programs.  As  an 
illustration,  both  theoretical  simulation  and  physical  implementation  on  the  ground  hardware  have  been 
performed,  first  to  evaluate  the  long-term  behaviour  (outer  loop  performances)  and  then  the  short-term 
behaviour  (inner  loop  performances). 

1 .  LARGE  GEOSTATIONARY  SPACECRAFT  ATTITUDE  MEASUREMENT  AND  CONTROL  CONCEPT 

Most  telecommunication  satellites  attitude  control  concepts  are  based  on  the  conservation  of 
angular  momentum;  when  oriented  perpendicularly  to  the  equatorial  plane,  this  property  will 
maintain  orientation  around  the  yaw  axis  (satellite/Earth  line).  However,  solar  pressure  tends 
to  drift  the  satellite  angular  momentum;  when  an  Earth  sensor  is  used  to  control  both  pitch  and 
roll  axes  (perpendicular  to  the  orbit  and  along  the  orbit  axes),  the  yaw  error  is  limited  in 
amplitude.  This  is  the  orbital  gyrocompass  eff^ect.  Now,  when  increased  power  requirements  or  the 
need  for  bigger  platforms  appear  (space  platforms,  antenna  farm  satellite,  etc.),  with  the  same 
stringent  yaw  pointing  accuracy,  this  concept  requires  an  angular  momentum  unachievable  with  the 
current  technology. 

A  direct  yaw  measurement  is  then  necessary.  A  number  of  optical  sensors  have  been  investigated 
(Polaris  sensor),  but  the  most  straightforward  one  is  the  gyroscope. 

As  an  example,  in  Figures  4  &  5,  we  describe  a  configuration  where  the  attitude  measurement 
assembly  consists  in  : 

.  an  infrared  Earth  sensor 

.  a  gyropackage  with  three  component|,  the  sensitive  axes  of  which  are  skewed  in  roll/yaw  plane 
.  a  digital  Sun  sensor,  located  on  X  face  of  the  satellite,  providing  information  around  yaw, 

for  a  reduced  length  of  time,  once  per  orbit. 

Figure  6  depicts  the  short-term  measurement  and  control  concept  :  the  pitch  loop  is  driven 
by  the  IRES  output,  and  is  decoupled  from  the  other  axes.  The  roll/yaw  axes  are  coupled  and  driven 
by  gyroscopes  rates  outputs.  The  torques  commands  are  a  combination  of  errors  and  their  integral 
(PI  control). 

The  Kalman  filter,  taking  into  account  system  transition  and  observation  matrices,  computes  gains 
to  update  the  new  angular  errors  estimates  and  5^  and  the  new  drift  estimates  and  3^^  . 

A  typical  long-term  behaviour  is  shown  in  Figure  7,  with  two  periods  of  Sun  observation  (30  hrs). 

This  concept  has  been  physically  implemented  by  MATRA  and  C.N.E.S.  under  the  TASS  contract  for 
INTELSAT.  Sensors  were  mounted  on  the  C.N.E.S.  3-axis  controlled  air-bearing  table,  and  computation 
performed  on  the  ground  computer  (SOLAR  64) . 


2.  EARTH  OBSERVATION  SATELLITES  ATTITUDE  MEASUREMENT  AND  CONTROL  CONCEPT 

Earth-oriented  payload  may  require  angular  rate  stability  (10  degree/second)  for  imagery 

and  a  pointing  accuracy  better  than  10  degree  for  pattern  rocongni tion .  The  satellite  orbit  is 
helio-synchronous  so  that  the  Sun  vector  is  at  a  constant  angle  from  the  orbit  plane.  A  variety  of 
configurations  have  been  investigated  in  preparation  for  tlie  national  and  Kuropean  Earth  observation 
program. 


One  of  the  most  promising  concepts  has  been  investigated  up  to  the  breadboard  level;  it  makes 
use  of  the  orbital  rate  which  allows  the  implementation  of  static  CCD  Pnear  arrays,  scanning,  the 
celestial  sphere. 

Short-term  attitude  measurement  is  performed  using  a  set  of  six  gyroscopes,  implemented  in  a 
dodecahedric  configuration.  Control  is  performed  by  three  magnetic-bearing  reaction  wheels, 
oriented  along  the  spacecraft  principal  axes  of  inertia. 

Measurement  equations  are  described  first  in  some  detail,  showing  the  complex  star  sensors 
outputs,  combining  all  attitude  errors.  At  one  instant,  attitude  is  not  fully  observable; 
continuity  of  the  estimation  process  is  ensured  using  the  satellite  model  prediction.  After  at 
least  three  stars  crossings,  full  observation  is  possible  and  complete  estimates  of  spacecraft 
angular  position  and  drifts  are  available. 

The  star-mapper  geometry  is  defined  by  angles  f  and  y  •  \ 

As  the  spacecraft  orbits  the  Earth  with  the  Z  axis  ^ 

aligned  on  the  geocentric,  the  star-mappers  field  of  ^ \  ^ 

view  swaths  the  celestial  sphere.  Known  stars  are  ^ 

observed,  and  both  the  instant  of  crossing  and  the  ^  ^ 

number  of  excited  CCD  elements  are  recorded. 


»• . 


Error  signals  are  obtained  by  comparing  the  sensor  output  with  known  star  ephemerides  : 
A’x  =  A6  *  -(J)  cos  Y  -  sin  y 

At  =  -  ^  =  (ij)  tg  6  sin  Y  +  0  -  il*  tg  6  cos  y) 

0  0 


For  star-mapper  1  : 

so  that  :  AXj 

For  star-mapper  2  : 

so  that  :  |Ax2 
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A  full  simulation  of  spacecraft  dynamics,  orbit  kinematics,  star  pattern,  estimation  and  control 
scheme  has  been  performed. 

A  typical  case  has  been  recorded  hereunder.  Six  stars  per  orbit  and  per  mapper  are  generated  with 
a  non-uniform  distribution,  in  order  to  have  a  complex  variation  of  gains  and  error  covariances. 

The  times  of  transi  stars  in  SMI  field  of  view  are  :  100,  600,  1500,  1800,  2500,  4000  seconds, 

and  for  SM2  :  200,  /JO,  2000,  3000,  5000,  5500  seconds. 

Hereunder  we  recall  the  nominal  data  used  for  reference  records  ; 


T  initial  state  : 

d 

r  initial  estimation  :  4i 

T  continuous  state  spectral  density  :  V 

V 

T  measurement  noise  standard  deviation 

.  star  location  :  a  “  9  .  10  ^  d 
.  transit  time  .*  a  *  0.015  sec 

T  initial  error  covariances 

.  attitude  :  1  deg^  2 

.  drifts  :  0.01  (deg/hour) 

r  orbit  altitude  :  700  km 

T  number  of  stars  per  revolution  :  6. 
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We  have  recorded  the  evolution  of  the  state  vector  :  .i  ^  ,  .1,,  .i  ^  in  •  :t.  i  r  it. 

values  are  to  be  multiplied  by  t]ie  factor  indicated  to  he  expiiss,-,!  in  the  mu.'  i:  ‘  i  i.  .  .  t  ^  . 

A  breadboard  model  of  the  attitude  measurement  unit  has  l>t'en  huilt  hv  *‘'A!KA  tin.;'  i  t  h*  <  . ^ . 

SMAOII  contract.  A  set  of  four  SAGKM  gyros  has  heen  selected;  attiiuiU-  'tu  .ism .  ;'it  nt  lic 
were  implemented  in  a  digital  unit  using  two  GMOS  IL’-hit  mi  cropri>cessor‘' i  HAKR 1 S  niinn.  p,.  tmi  t 
was  mounted  on  a  C.N.E.S.  3-axis  servoed  air-hearing  table;  a  ground  con)Mif«.r  ‘Si'IAK  n,'  was  j  : 
to  simulate  star  sensors,  the  orbital  kinematics,  and  the  spacecraft  dvnaniiis  an<i  .onti.  !.  N.'-inal 
performances  were  verified,  and  performances  below  10  Arc  seconds  wre  ohtainrd. 

This  program  has  allowed  the  validation  of  the  concept  fiU'  a  futiirt-  ir:pli  ;.:»  nt  ar  :  a  i  i  ■.na  •  . 

3.  FLEXIBLE  SPACECRAFT  STATE  ESTIMATION  CONCEPT 

In  a  special  research  and  development  contract,  awarded  to  MATRA  by  INTELSAT  (lAOKS  contract), 
we  are  currently  investigating  the  enhancement  of  a  large  communication  platfc^rm  short-term  attitude 
pointing  accuracy. 

The  satellite  is  described  in  Figure  9.  It  consists  of  a  main  body,  carrying  large  solar  arrays 
and  an  offset  antenna,  gimballed  around  two  axes  by  an  antenna-pointing  mechanism  and  carrying  a 
radio-frequency  sensor. 

A  first  investigation  of  independent  control  of  the  main  body  and  large  antenna  was  made,  showing 
the  limitations  in  overall  pointing  accuracy,  mainly  due  to  uncontrolled  flexible  modes. 

When  better  performances  are  required,  namely  in  station-keeping,  when  the  solar  arrays  and 
antenna  flexible  modes  are  excited  by  the  thrusters  pulses,  a  centralized  state  estimation  and 
control  must  be  performed.  Digital  processing  of  gyroscopes  rates,  the  main  body  IRES  and  radio¬ 
frequency  sensor  outputs  are  performed,  and  modes  located  in  the  control  bandwidth  and  slightly 
above  it  are  observed  and  controlled. 

Figure  10  shows  typical  simulation  results  with  the  enhancement  of  transient  performances. 

SATELLITE  MISSIONS  IMPLEltENTING  THE  CONCEPT 

The  optico-inertial  concept  is  currently  implemented  in  a  variety  of  on-going  space  programs.  We  now 

give  a  short  survey  of  those  satellites  design. 

1 ,  ESA  EXOSAT  MISSION 

ESA  has  recently  launched  the  EXOSAT  spacecraft,  the  payload  of  which  is  devoted  to  the  study  of 
astronomical  radiation  sources.  The  attitude  measurement  assembly  is  based  on  a  4-gyroscopes  inertial 
unit  (FERRANTI),  updated  by  filtering  on  the  star  tracker  outputs  (SODERN) .  The  spacecraft  attitude 
control  is  performed  by  cold  gas  actuators,  and  limit  cycles  of  one  arc  second  are  currently  achieved. 
Drifts  stability  has  proven  excellent  (below  specifications). 

2,  SPOT  MISSION 

The  C.N.E.S.  Earth  observation  program  first  satellite  is  currently  manufactured  by  MATRA. 

The  attitude  measurement  sub-assembly  is  based  on  a  6-gyroscopes  inertial  unit  (SAGEM,  MATRA), 
an  infrared  Earth  sensor  (SODERN),  a  digital  Sun  sensor  (MATRA).  Performances  ar^  'xpected  to  be 
lower  than  10"^  d/sec  in  angular  rate,  and  0.15®  absolute  pointing  accuracy. 

3.  l-SAT  MISSION 

BAe  is  now  manufacturing  the  ESA  direct  TV  broadcasting  satellite.  The  attitude  measurement 
assembly  consists  in  a  7-gyroscopes  inertial  unit  (FERRANTI),  5  on  the  yaw  axis  for  reliability 
requirements  and  2  in  the  roll/yaw  plane,  IRES  and  RF  sensors,  mounted  on  APM,  are  also  envisaged. 
This  mission  implements  both  short-term  state  estimation  of  flexible  modes  and  long-term  updating 
of  the  yaw  inertial  reference. 

4.  HIPPARCOS  MISSION 

E.S.A.  is  now  initiating  the  HIPPARCOS  program,  aiming  at  mapping  100  000  stars  in  our  galaxy, 
the  coordinates  of  which  are  to  be  obtained  after  ground  processing  at  an  unachieved  accuracy 
(0.002  Arc  second).  MATRA  is  prime  contractor  for  the  satellite  and  the  payload.  AERITALIA  is 
main  contractor  for  the  platform.  MATRA  and  BAe  cooperate  in  attitude  measurement  and  the  control 
subsystem.  It  consists  in  a  set  of  b  gyroscopes , and  attitude  information  is  obtained  from  two 
slit-type  star  mappers,  located  in  the  payload  focal  plane.  Attitude  and  drifts  updating  is  made 
at  a  random  rate  (10  to  100  seconds).  The  performance  is  expected  to  he  lower  than  1.4  Arc  seconds 
on  three  axes. 

A  posteriori  attitude  reconstitution  is  expected  to  be  better  than  0.1  second,  a  performance 
achievable  owing  to  the  good  quality  of  star  mappers  and  gyroscopes.  Attitude  control  is  performed 
by  cold  gas  actuations. 

Several  new  missions  wi  1 1  implement  the  conct*pt,  namely  the  ETRECA  platform. 
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AN  EXAMPLE  OF  PHYSICAL  IMPLEMENTATION 
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In  this  section,  spacecraft  on-board  data  processing  is  first  considered.  A  description  of  the 
"intelligent  unit",  performing  spacecraft  state  estimation,  is  given;  it  is  based  on  standard  space 
qualified  components.  Newcoming  hardware  is  then  considered. 

The  physical  implementation  of  our  concept  is  made  within  the  frame  of  the  F..S.A  standardization 
of  on-board  digital  processing.  Figure  11  shows  the  selected  architecture,  centered  on  a  serial  data 
bus  (on-board  data  handling  bus),  driven  by  the  platform  controller,  and  on  which  are  connected  "intel¬ 
ligent"  and  passiw  units. 

Figure  12  presents  the  block-diagram  of  hardware  developed  by  MATRA  for  C.N.E.S.  (SMAOII),  with 
a  bi-processor  organization.  The  microprocessor  is  a  HARRIS  CMOS  6100,  a  twelve  bits  processor,  which, 
until  recently,  was  the  only  microprocessor  available  in  Europe  with  radiation  hardening  sufficient  for 
long-duration  space  missions. 

A  first  microprocessor  is  used  to  manage  sensors  and  to  provide  the  short-term  state  estimation 
(gyros  projection  and  integration);  the  second  microprocessor  implements  the  Kalman  filter  and  manages 
the  interface  to  the  external  bus.  The  software  size  in  microprocessor  1  is  3.8  K,  including  the  fixed- 
point  library;  with  a  5  Hz  gyroscopes  acquisition  frequency,  the  execution  time  is  50  ms  with  a  2  MHz 
internal  clock  (safe  design).  In  microprocessor  2,  6.0  K  of  memory  are  used,  including  floating-point 
library;  execution  time  of  the  Kalman  filter  is  3.8  seconds,  a  delay  which  has  no  influence  in  this 
appl ication. 

Space-qualified  hardware  is  in  constant  evolution;  a  new  microprocessor  is  now  selected  for  space 
application,  owing  to  its  resistance  against  radiations  encountered  during  a  10-year  mission  at  a  geo¬ 
stationary  altitude.  The  new  units  will  be  fitted  with  the  TEXAS  INSTRUMENTS  16  bits  SBP  9989. 


AUTONOMOUS  NAVIGATION 

On-board  control  functions  for  the  recent  S/C  designs  comprise  trajectory  or  orbit  automatic 
determination  tasks.  These  techniques  involve  the  mixing  of  inertial  measurement  (accelerometric  and 
gyrometric  packages)  and  external  measurements. 

In  order  to  simplify  this  paper,  the  presentation  is  restricted  to  two  particular  cases  which  have 
recently  aroused  considerable  interest  : 

.  autonomous  station-keeping  for  a  geostationary  spacecraft 

.  autonomous  relative  trajectory  estimation  during  a  low  Earth  orbit  rendez-vous. 

1.  AUTONOMOUS  STATION-KEEPING 

In  general,  autonomous  navigation  algorithms  use  two  external  references  (the  sun,  planets  or  stars). 
We  will  present  below  a  promising  method  for  autonomous  orbit  determination,  which  uses  only  the  sun 
as  an  external  additional  measurement  ,  since  the  Earth  reference  is  almost  always  available  on-board 
a  geostationary  telecommunication  satellite. 

The  problem  is  the  determination  of  the  two  out-of-plane  parameters  :  longitude  of  ascending  node  £1 
and  inclination  i,  or  the  orbit  pole  vector  components  : 

C  ”  i  cos  U  (i)  :  longitude  of  ascending  mode,  i  :  inclination) 

Ti  ■  i  sin  n 

Assuming  a  perfect  and  circular  orbit,  the  solar  declination  measurement  in  a  meridian  plane  of  the 
satellite  gives  the  instantaneous  latitude  of  the  satellite  (assuming  also  a  perfect  control  of  the 
pitch  axis  in  the  N/S  satellite  Earth  plane) 

I  •  C  sin  (Ogt  +  n  cos  (jjgt 

where  0)^  is  assumed  equal  to  the  earth  rotation  rate  and  t  is  known.  If  we  assume  also  that  the  node 
position  is  known,  the  orbit  inclination  can  be  derived. 

Without  the  assumption  on  nodes  position,  two  measurements  are  necessary  with  different  Earth-Sun 
direction.  Thus  the  determination  is  only  possible  over  a  significant  period  duration. 

6i82Ei£5!S2_52E£££2 

In  order  to  show  clearly  which  type  of  measurement  processing  is  preferred  for  the  orbit  determination, 
a  typical  approach  is  developed  in  a  few  lines.  The  orbit  determination  uses  only  the  Earth-satellite- 
Sun  angle  measurement  and  a  reference  clock; 


Let  us  take  a  reference  axes  system  in  inertial  space,  charac  ter  i  zeii  bv  a  N('r  t  h-pi*  i  nt  i  lu;  axis  ami 
a  X  axis  pointing  along  the  first  point  of  Aries. 


The  mean  longitude  of  the  spacecraft  measured  relative  to  the  first  point  of  Aries  is  : 
X  -  il  +  (jj  +  M 

wi  th 


longitude  of  ascending  node 
perigee  argument 
mean  anomaly. 


We  also  use  the  pole  position  vector  and  the  eccentricity  vector  : 


i  sin  P. 


pole  vector  (i  :  inclination) 


e  cos  (n  +  u) 


eccentricity  vector  (e  :  eccentricity) 


e  sin  (f!  +  oj) 


The  mean  longitude  is  given  by  :  X  =  *  (Dg  +  G)t 


dG/dt  G  :  Greenwich  sideral  time 


drift  rate  relative  to  Greenwich 


Consider  the  rotation  vector  W  which  defined  the  rotation  of  the  Earth-satellite  vector  U  from 
nominal  to  actual  one. due  to  orbit  perturbation.  The  Z  component  of  the  vector  includes  the  S/C 
mean  longitude  variation  (drift  rate  effect)  and  the  eccentricity  effect;  the  projection  of  W 
in  the  XY  plane  defines  the  inclination  and  the  line  of  nodes  of  the  new  orbit  : 


W  -  -i  cos  n 

X 

W  •  -i  sin  U 

y 

W  -  AX  +  X  sin  u  t  +  C  cos  u  _t 


We  note  S  the  satellite  to  Sun  vector.  The  problem  consists  in  the  determination  of  W,  knowing  only 
the  angle  between  U  and  S  as  seen  from  the  satellite  with  : 


X  “  Sun-satellite-Earth  angle 

XI  “  Sun-Earth-satellite  angle 
Angle  XI  is  given  by  ; 


180°  -  X  -  e 


with  e  :  parallax  correction  (up  to  0.016°)  which  can  be  computed  knowing  the  mean  S/C  position. 


The  X  angle  is  computed  from  the  Earth  sensor  and  the  Sun  sensor  outputs.  After  the  parallax 
correction,  Che  measurement  is  :  „ 


S  U  (scalar  product). 


Between  the  nominal  satellite  position  and  the  actual  one  (at  a  given  time  t)  :  U  =  Ug  +  WA  Ug 


where  W  denotes  the  matrix  equivalent  of  the  vectorial  product  : 


U  =  (I  +  W) 


0  -W  W 
z  y 


-W  W 
y  X 


The  measurement  is  now  given  by 


m(t)  =  S^U  -  S^Ug  +  S^(WUg) 


T  T 

y  -  S  Ug  “  S  (WOg)  (after  perturbation  of  the  mixed  product). 


In  this  equation,  the  left-hand  side  is  a  known  scalar,  while  the  right-hand  is  a  linear  combination 
of  W 


Ay  -  W  .  (SUg) 


A  global  determination  is  based  on  a  Kalman  filter  which  works  on  the  orbit  parameters 


X  -  (W  D„  X  C  n  C)  . 
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The  measurement  equation  is  time-variant  at  the  orbit  rate  : 

y  -  n(SU)^  +  C(SU)^  +  |AX  +  X  sin  w  ^t  +  r,  cos  (SU)^  =  HX 

The  evolution  matrix  (X  =  AX)  is  :  0  I  0 

0  0  0  ... 

^  ‘  0  0  0  ... 

The  input  matrix  is  given  by  the  main  orbit  perturbations  :  Earth  gravity  harmonics,  luni-solar 

gravity,  radiation  pressure.  For  instance,  for  the  radiation  pressure  in  plane  effect  : 

X  =  “kj  S(I  +  a)/m  cos  6s  sin  as 

C  “  -k^  S(l  +  ci)/m  cos  6s  cos  as 

S  :  effective  cross  sectional  area 

0  :  average  reflectivity 

m  :  spacecraft  mass 

6g/a^  :  Sun  declination  and  right  ascension. 

The  orbit  correction  effect  can  be  also  introduced  by  step  on  orbit  parameters  (Ax  »  Ac). 

The  Kalman  filter  takes  the  form  : 

\/k  =  \/k-i  "  ‘■k/k  •  “k  '  «\> 


’Sc/k-l  ”  ®k/k-l  \-l/k-l  *  \-l 

4  4 

(transition  matrix)  (input  matrix  :  orbit  perturbation,  maneuver  effect) 


P  k/k 
^k+l/k 


P'’k/k-l  "  K  «■'  «k 

K  \/k  «k"  ^  \ 


covariance  matrix  extrapolation 


K  deterministic  approach  will  be  used  rather  than  a  stochastic  one  :  the  measurement  noise  R 
and  the  process  noise  0  covariance  matrix  are  chosen  so  that  the  filter  has  a  given  response  time, 
for  instance 

=  ^k/k^^  with  N  :  given  number  of  sampling  periods. 


Sun  sensors  implementation 

High  resolution  Sun  sensors  are  required,  providing  a  0.02°  accuracy.  Digital  sensors  are  candidates : 

.  two-axis  Sun  sensors 
.  meridian  slit-type  Sun  sensors. 

The  first  class  includes  new  types  of  CCD  Sun  sensors.  The  second  class  includes  digital  Sun  sensors 
providing  accurate  measurements  of  both  Sun  elevation  angle  and  the  time  when  the  Sun  crosses  the 
sensor  field  of  view,  which  allow  to  determine  the  Sun-Earth  angle  once  the  relation  alignment  of 
Earth  and  Sun  sensor  is  known. 

The  number  of  slits  depends  on  the  requirements  on  the  orbit  determination  duration;  for  instance, 
for  in-plane  parameters,  if  the  parameters  determination  must  be  performed  in  one  orbit,  4  slits  are 
probably  necessary  (4  measurements  are  necessary  for  mean  longitude,  drift  rate  eccentricity  and 
perigee  crossing).  However,  if  we  consider  that  previous  information  can  be  used  in  the  determination 
filter,  the  number  of  slits  can  be  decreased.  The  minimum  number  of  slits  is  probably  2,  if  we 
assume  a  low  variation  of  parameters  (the  drift  rate  is  estimated  on  several  orbits  and  two  measure¬ 
ments  on  the  same  orbit  determine  the  eccentricity  and  the  perigee  crossing).  The  required  FOV  for 
each  slit  is  about  50°. 


autonomous  trajectory  determination  during  RENDEZ-VOl'S 

The  lack  of  ground  assistance  (when  no  TDRSS  is  available)  during  a  low  Karth  orbit  automated 
rendez-vous  creates  an  obvious  need  for  on-board  navigation.  The  prob lem  i s  to  ident i f y  the  rel a t i ve 
trajectory  w.r.t.  the  target  (assumed  here  on  a  circular  orbit).  A  possible  approach  is  presented 
hereafter. 

The  chaser  spacecraft  is  Earth-pointed.  The  rendez-vous  sensor  is  an  RF  radar  with  range  and 
angles  measurement  (monopulse  receiver).  The  problem  is  to  extract  the  chaser  coordinates  in  the 
target  reference  axis,  through  the  RF  measurement. 
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Figure  15  -  CHASER  AND  TARGET  REFERENCE  AXIS  SYSTEM 
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A  Kalman  filter  is  selected  to  process  radar  outputs  in  order  to  obtain  position  estimates. 
The  chaser  motion  can  be  written  in  the  form  : 


X  =  AX  ♦  BU  +  V 


I  •  •  • iT 

|x,  y,  z,  X,  y,  z| 


U  -  lY^.  Yy.  Y^l 
V  •  perturbation  +  model  errors. 


It  will  be  assumed  that  the  radar  is  boresighted  with  the  X  axis  of  the  chaser  so  that  a  and 
are  measured. 

Measurement  equations  are  ;  m  °  h  (X) 


J  •• 


sc. 01 


The  measurement  is  obviously  not  linear.  The  Kalman  algorithm  (recursive  Riccati  equation)  will 
then  require  the  Jacobian  matrix  of  the  measurement  : 


^h  I 


.  \  =  \/k .  , 

This  (4,6)  matrix  will  be  computed  at  each  step  by  a  numerical  method. 


Extended_Kalman_f ilter  algorithm 
The  equations  are  : 


\/k-I 

=  ^  \-l/k-l 

\/k-l 

=  ''  (\/k-P 
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Figure  16  shows  simulation  results  of  the  estimation  process  and  the  resulting  rendez-vous  trajectory 


CONCLUSION 


The  optico-inertial  concept  and  its  applications  has  been  described  in  some  detail;  it  has  evolved 
from  the  initial  research  and  development  stage  to  experience  a  full  development  for  space. 

Extensions  are  numerous,  so  that  this  method  is  now  considered  as  basic  for  modern  spacecraft 
navigation  and  control. 
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SUMMARY 


'"This  paper  refers  to  a  collaborative  piroject  to  develop  an  accurate  attitude  determination 
system  based  on  the  ccoibined  use  of  gyros  and  star-crossi>ig  detectors.  The  latter  are 
attractive  for  earth-pxiinting  satellites  but  the  intermittent  nature  of  the  data  introduces 
complications,  compared  to  star  tracker  systems.  Background  is  given  on  the  hardware,  but  the 
emphasis  is  on  formulation  of  the  estimating  algorithm  (suitable  for  limited  wordlength  micro¬ 
processors),  characterization  of  gyro  drift,  and  estimation  of  overall  pierformance  both  for  low- 
earth  and  geostationary  orbits.  , 


INTRCDUCTION 


U 

'J 


h 


While  the  requirements  of  different  satellites  are  a  function  of  the  missions,  the  trend  over 
the  last  ten  years  has  been  to  more  accurate  pointing  of  spacecraft.  Using  examples  f'rc<n 
Europiean  missions,  ESRO  I  had  pointing  to  about  10  deg.  in  1970,  C0.SB  to  about  2  leg.  in  1975 
while  the  oommunication  satellites  of  the  late  seventies  and  eighties  (OT.S,  EC5  and  LSAT)  have 
pointing  accuracies  around  0.1  degrees.  However  EXOSAT  provides  a  recent  example  of  a  scien¬ 
tific  satellite  with  pxjinting  better  than  10  arc  seconds,  and  the  trend  is  exp)ected  to  contiime. 

The  combination  of  a  gyro  package  and  one  or  more  star  sensors  has  become  common  for  accurate 
attitude  measurement  systems,  but  the  more  accurate  systems  (in  Europe)  have  been  based  on  a 
star  tracker,  i.e.  a  sensor  which  retains  one  or  more  stars  in  the  field  of  view  for  prolonged 
periods  which  permits  almost  continuous  resolution  of  the  satellite  attitude  angles.  This  pjaper 
reports  on  a  UK  collaborative  project  based  on  the  development  of  a  star-crossing  detector  which 
is  expected  to  be  ligher  and  consume  Less  power  than  tracker  systems,  although  it  is  suitable 
only  for  earth-pointing  applications  or  when  a  satellite  has  a  slow  rate  of  rotation.  The 
method  of  combining  the  star  crossing  data  with  the  inertial  rate  date  from  the  gyros  is  how¬ 
ever  complicated  by  the  intermittent  nature  of  the  former,  and  because  the  satellite  attitu<ie 
angles  cannot  be  resolved  directly  from  one  star  transit. 

Following  an  early  paper  by  Jude  (ref. 9)  ESA  flinded  two  study  contracts,  one  with  Matra  and  one 
with  RAE,  although  a  proportion  of  that  work  was  subcontracted  to  British  Aerospace  at  Bristol 
(ref.1).  As  a  sequel  to  these  studies,  the  UK  Dept,  of  Industry  (via  RAE)  initiated  the  project 
EADS  (Filtered  Attitude  Determination  System)  in  1981  with  the  objective  of  develooing  an 
attitude  measurement  system,  initially  to  breadboard  .standards,  compatible  with  the  evolving  FSA 
specification  for  interfacing,  viz.  MACS  or  'Modular  Attitude  Control  System'.  The  project  FADS 
involves  the  following  collaboration  in  the  UK: 

(1)  BAe  -  Bristol;  system  studies,  microprocessor  software  and  hardware. 

(2)  MSDS  -  Portsmouth;  star-sensor,  assembly,  integration  and  test. 

(3)  Ferranti-Bdinburgh;  gyro  development  and  testing. 

The  programme  is  sub-divided  into  S  and  D  activities.  The  former  is  concerned  with  the  definit¬ 
ion  of  FADS  In  a  more  general  form  suitable  for  flight  applications  at  a  fliture  date,  and  with 
extensions  to  other  sensors,  etc.  The  D  programme  refers  to  the  current  specific  experimental 
demonstrations,  employing  an  air-bearing  platform  originally  developed  at  RAE  txit  now  commiss¬ 
ioned  by  MSDS.  Although  reference  is  made  in  this  paper  to  many  aspects  of  the  project  ,  it  is 
concerned  primarily  with  system  studies  and  estimation  of  performance. 


Any  views  e.xpressed  in  this  paper  are  those  ot  the  author  and  not  neeessaril> 
of  British  Aerospace  PLC 


CQMPQNFNTS  OF  THR  SYSTKH 

THE  STAR  SENSOR  AND  STAR  TABLES 

The  oharjce-cou  pi  eci-de  vice  (CCD)  star  seriecr  was  the  ri. 

activity  at  RAE  up  to  1980.  After  this  date  the  level  lernest  w  i."  ■  j  :  v 

Marconi  Space  and  Defence  Systems  and  is  now  an  essent:  aL  part  C  t  t  ; 
oroject.  Two  such  star-crossing  detectors  are  necesr-.ry  t  .  i  .e  ivi  :■  .-r  ”  " 
information  accurate  about  three  axes,  although  one  su  -n  .■enr  r  m -.v  :•  •  :  .  v- 

if  a  degraded  accuracy  about  one  axis  is  acceptable. 

The  sensor  detects  the  transit  of  star  images  acro.ss  a  linear  array  : 
elements  lying  in  the  focal  plane  of  the  sensor.  In  an  ear  t  li- p  ^  j  r!t  )  a,- 
satellite,  the  star  image  motion  relative  to  the  sensor  fieii  -.f  vi-^v,  i  ^ 

orbital-rate  rotation  about  the  orbit  normal  as  shown  in  fig.E.l.  In 
orbit,  the  field  of  view  of  the  sensor  sweeps  out  a  hand  of  the  'el-rt:a; 
sphere  as  shown,  of  width  9  degrees. 

The  sensor  makes  measurements  of  the  timing  and  position  along  t  lie  ar-rav  : 
each  star  transit,  although  the  basic  accuracy  is  refined  eonei  iora hi y  Iv 
appropriate  processing  (ref.1,  section  4.2).  The  latter  are  then  ’ot: r  i'-'  i 
with  the  nominal  time  and  position  of  transit  which  would  be  f-njn 1  if 
satellite  attitude  errors  (and  sensor  mi  sal  ignment  s )  wei  >  zero,  and  t  tie  it.  ''’o- 
ancies ,  A.t  and  Ax.  between  the  actual  and  nominal  transit  data,  form  t 
sensor  measurements  which  are  related  to  the  satellite  attitude  err  e’r  tv  f  f,“ 
measurement  equations  below. 

At  as  - ^  ^  Can(^  si  1  ^ 

Ay.  siinY  —  ^c.qsY 

U)  is  the  satellite  orbital  angular  velocity,  and  0,9  andt^are  the  roll,  pitch 
and  yaw  angular  errors. 

The  sensor  is  based  on  a  Fairchild  1728  element  CCD  array  suitable  for  rtarr- 
of  silicon  magnitude  3  or  brighter.  Future  developments  may  include  cxrcrvioi 
optics,  to  permit  detection  of  magnitude  4  stars,  and  even  a  two-dimensional 
array  when  it  would  become  a  star  tracker  oroviding  virtually  continuous 
angular  data.  RAE  (ref.1)  estimated  that  the  early  version  of  this  star 
sensor  would  have  an  accuracy  in  both  angle  and  crossing-time  of  about  6  acc 
seconds  (at  3  sigma  leve)  ),  which  is  consistent  with  more  recent  statements  hv 
MSDS,  although  the  accuracy  is  much  better  for  brighter  stars  .such  as 
magnitude  zero.  MSDS  have  indicated  that  the  alignments  of  the  sensors  could 
be  calibrated  on  the  ground  to  within  1  am  second  hut,  due  to  thermal  changes 
in  non-rigid  structures,  it  is  generally  accepted  that  in-flight  calibrations 
against  ground  reference  points  are  desirable. 

In  order  to  generate  the  star  tables  in  a  form  suitable  for  the  st ar-cross i ng 
detector,  it  i.s  necessary  to  carry  out  the  following  steps: 

(1)  Hold  a  store  of  the  star  epherr.sris  in  heliocentric  co-ordinates  to  an 
accuracy  better  than  0.1  arc  sec  e.g.  204  or  635  s'^ars  of  magnitude  3 
(or  brighter),  or  magnitude  4  (or  brighter)  respc  Ively. 

(2)  Transform  co-ordinates  for  a  given  star  to  geocentric  co-ordinates  and 
apply  corrections  (ref.l). 

(3)  Transform  to  orbital  co-ordinates,  which  requires  time  and  the  orbital 
elements  (updated  from  time  to  time). 

(4)  Re.iect  if  not  in  either  .f  the  swathe."  for  each  sensor,  but  treating 
the  slit  as  4  deg.  longer  than  its  actual  value  e.g.  number  of  stars 
retained  equals  33  (magnitude  3  or  brighter)  or  49  (magnitude  4  or 
bright  er  )  . 

The  two  opt i  S’S  of  ground  or  onboard  processing  of  the  above  steps  has  been 
considered  r^f.2).  The  on-b.oard  storage  requirements  for  both  options  are 
not  excessi/e,  hut  onboard  procp.n.sing  is  favoured  beeause  it  reduces  the  dep¬ 
endence  on  the  grouri  1  link,  only  occasional  updating  of  orbital  parameters 
being  necessary. 


The  available  sta""  f 
FADS  rtip-iics  Ir-,.  fP  .  1 

wh  e "  w  c " k i •  g  with  nil 

Sta"  scr,  ..nc,  the  t  ypi 

mj’''ute-  a'd  ”'6  mi’utc 


such  a  so.isoo  ha;s  hoc-,  dot  i 'cu  b  'd  t.  i  v  1  h"  MTOE  and 
a-’ !  a-d  an  example  is  simmacisci  i"  table  2.1.  Thus 
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TABLE  2  .  1 

EXAMPLES 

OF  STAR  TRANSITS 

ORBIT 

SILICON 

NO. OF  CROSSINGS 

MLAN  TIME  BETWEEN 

WORST  (.!  A  S  K  , 

MAG. 

IN  BOTH  SENSORS 

TRANSITS,  MINS. 

OVER  YEAR 

98  min . , 

3 

10  -  23 

5.0 

S1=P,  S2: 10 

low  sun 

synchronous 

4 

21  -  38 

3.3 

SI  =7,  S?:11 

24  hour 

3 

19 

76 

equatorial 

5-6 

160  -  It 80 

9-3 
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2.2  RECENT  TESTS  ON  THE  FERRANTI  125  GYRO 


The  drift  of  the  gyro  between  star  sightings  is  a  critical  factor  determining 
the  overall  accuracy  of  FADS,  and  therefore  emphasis  has  been  placed  on  obtain¬ 
ing  additional  data  from  test  runs  over  periods  of  12  hours  to  5  days.  The 
Ferranti  125  gyro  has  of  course  been  employed  in  a  number  of  space  projects 
such  as  Ariane,  Miranda,  Spaoelab,  IPS,  Exosat  and  Lsat ,  and  detailed  informat¬ 
ion  is  best  obtained  from  the  manufacturer  e.g.  King's  paper  (ref. 3).  A  few 
explanatory  remarks  may  however  be  convenient  for  the  reader. 

The  Type  125  is  a  single-axis  floated  "rate-integrating"  gyro,  the  float  being 
suspended  on  jewel  and  pivot  bearings  and  the  wheel  in  ball  bearings.  Type  126 
has  gas  bearings  but,  as  a  result  of  space  experience  and  life  tests  over  five 
years  with  the  Type  125,  application  of  the  latter  is  expected  to  continue  for 
the  foreseeable  future.  It  is  designed  for  use  in  the  rate  mode  with  direct 
electrical  feedback  from  pick-off  to  torquer,  or  in  the  rate-integrating  mode 
where  the  feedback  from  the  pick-off  measure  of  spacecraft  angle  is  via  the 
control  system  and  physical  rotation.  The  former  is  in  use  in  this  application 
with  the  feedback  to  torquer  adjusted  to  give  a  bandwidth  of  the  rebalance  loop 
of  5Hz.  This  slightly  low  value  was  recommended  to  minimize  the  danger  of  a 
bias  arising  from  high  frequency  noise  being  partially  rectified  by  residual 
nonl inear it ies . 

Extensive  tests  have  been  carried  out  by  NLR  and  Ferranti  under  an  ESA  contract 
(ref.4).  The  principal  series  of  measurements  were  with  closed  loop  for  diff¬ 
erent  bandwldths  of  the  rebalance  loop,  the  output  being  a  rate  signal.  The 
open-loop  performance  was  obtained  by  a  computational  conversion,  although  some 
measurements  were  taken.  Power  spectral  densities  were  calculated  from  sampled 
data  using  the  Fast  Fourier  Transform  but  the  lowest  useful  frequency  was  about 
2.5mHz  or  an  auto-correlations  time  constant  of  64  secs,  i.e.  this  work  gave  no 
information  on  slow  drift.  On  the  other  hand  it  is  worth  noting  the  following 
principal  characterization  of  the  high  frequency  noise: 

(a)  Two  mo nochromatic  components;  amplitude  =2.0  arc-sec  per  sec  at  l8.6Hz, 
amplitude  =2.0  arc-sec  per  sec  at  27Hz. 

(b)  Noise  r.m.s.  power  in  band  0-0 . 05Hz "^0 .003 1  deg/hr. 

and  in  band  0-5Hz  <v0.14  deg/hr. 

N.B.  1  deg/hour  =  1  arc-second  oer  sec. 

(c)  Integration  of  the  above  noise  power  indicates  an  r.m.s.  angular  error 
in  the  range  0.02  to  0.05  arc-seconds,  the  contribution  from  the  mono- 
chromativ  components  being  negligible. 

The  Ferranti  125  gyro  will  be  used  in  FADS  with  a  sample  rate  of  10Hz,  b\jt  the 
output  is  actually  angular  increments  over  intervals  of  1/10th  sec.  In  other 
words,  they  are  samples  of  rate  averaged  over  1/10th  sec.  intervals,  which  is 
roughly  like  a  low-pass  filter  of  bandwidth  4.4Hz  (see  appendix  8.1).  While 
this  may  seem  to  indicate  a  troublesome  time  lag  for  control  applications  it 
should  be  borne  in  mind,  at  least  'r  the  demonstration  with  a  rigid  body  load, 
that  wide  bandwidth  estimates  of  attitude  angles  and  rates  are  generated  by  a 
subsequent  state  observer  as  in  Exosat  (ref.5). 

In  the  recent  1983  tests  (under  the  UK  FADS  programme)  Ferranti  have  permitted 
closer  investigation  of  the  frequencies  below  50  mHz  by  recording  on  tape  the 
rate  averaged  over  su b- in ter val s  of  6  and  60  seconds.  This  data  has  been 
analysed  by  them  to  produce  additional  data  on  the  spectral  density,  examples 
of  which  are  fig. 2. 2  and  fig. 2. 3  for  sub-intervals  of  6  and  60  seconds  respec¬ 
tively.  Table  2.2  summarizes  the  results  on  four  test  runs  which  have  also 
been  analysed  at  BAe  in  other  ways  a:  explained  below. 
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TABLE  2.2  SPECTRAL  ANALYSIS  BY  FERRANTI 


RUN  NO. 

SUBIROTERVAL 

SECS. 

MEAN  1 . f . 
SPECTRAL  DENSITY, 

(deg  /h 
per  Hz 

BANDWIDTH 

TO  -3db, 

mHz 

50 

6 

0.000100  1 

60 

6 

0.000126  ) 

30 

6 

0.000158  ■) 

52 

31 

6 

0.000158  ) 

40 

60 

0.00158  ) 

41 

60 

0.000631  ^ 

no 

The  last  two  results  indicate  greater  spectral  density  at  the  lower  frequencies 
which  is  evident  in  the  figures.  However  the  bandwidths  of  table  2.2  and  figs. 

2.2  and  2.3  must  be  remarked  upon.  It  is  shown  in  appendix  8.1  that  if  a 
random  process  of  bandwidth  w  rad /s  is  passed  through  such  an  averaging  filter 
of  subinterval  h,  then  successive  averaged  pieces  of  data  become  independent  if 
wh  is  much  greater  than  unity.  The  spectral  density  of  the  random  rectangular 
waveform  is  then  of  the  form 


with  a  low  frequency  spectral  density  equal  to  that  of  the  orjpir.ai  prooess. 

The  bandwidth  of  (2.2)  to  half-oower  is  0.443/h  Hz.  which  for  h  equal  to  6  and 
60  secs,  yields  74  and  7.4  mHz  respectively.  The  snectral  densities  in  figs. 

2.2  and  2.3  do  not  have  the  exact  pattern  of  12.21.  presumably  due  to  the 
presence  of  random  components  which  leave  some  auto-correlation  in  successive 
averaged  pieces  of  data,  and  also  due  to  Ferranti's  additional  anti-aliasing 
filtering.  In  other  words  the  basir  shape  of  the  spertrai  densities  of  figs. 

2.2  and  2.3  derives  from  the  averaging  proress  etr  and  is  not  a  property  of  the 
original  rate  data. 

The  spectral  densities  of  figs.  2.2  and  2.3  exhibit  peaks  at  zero  frequency 
but  further  investigation  below  I  mHz  is  required.  For  this  BAe  have  employed 
additional  data  provided  by  Palmstroem  of  Ferranti  Navigation  Systems  Division. 
The  rate  data  has  been  further  averaged  over  intervals  of  6,25.6  and  60 
minutes  for  the  three  pairs  of  runs  in  table  2.2.  The  data  is  then  in  the  form 
of  a  random  time  series  and  is  perhaps  more  convenient  for  studying  properties 
of  slow  drift  over  hours  or  days.  Thus  the  six  series  of  data  are  presented 
in  figs.  2.4  to  2.9  and  concepts  of  time-series  analysis  (after  Box  and 
Jenkins,  ref. 6)  are  applied  to  derive  an  understanding  of  the  properties.  At 
the  same  time  it  is  remarked  that  such  times  series  with  a  subinterval  of 
about  6  minutes  are  exactly  in  a  form  relevant  to  assessing  FADS  performance 
in  a  low-earth  orbit,  or  about  80  minutes  for  a  geostationary  orbit. 

The  first  step  is  to  ensure  that  one  is  dealing  with  a  series  that  approximates 
to  a  stationary  random  process.  The  data  of  figs.  2.4  to  2.9  are  manifestly 
no^  stationary  random  because  (a)  evaluations  of  auto-correlations  have 
spurious  large  values  for  well  spaced  intervals  and,  (b)  the  series  can  be 
seen  to  have  long-term  trends  with  no  meaningful  mean  value.  If  the  trends 
i-vre  approximately  linear  we  might  detrend  the  data  but,  because  this  is 
uoubtful  (fig. 2. 7),  the  alternative  procedure  has  been  adopted  of  differencing 
the  data,  i.e.  form  a  new  series  y(n)  from  the  original  series  =  z(n  ) 

y(n)  :  z(n)  -  z(n-l)  (2.3) 

The  new  series  does  not  then  have  large  auto-correlations  for  widely  spaced 
intervals  although  the  theoretical  behaviour  of  certain  time-series  models  is 
usually  only  roughly  approximated  by  practical  data.  Tables  2.3,  2.H  and  2.5 
show  the  first  few  auto-correlations  of  the  new  series  y(n),  although  the 
numbers  are  the  mean  of  two  sets  of  data  for  each  of  the  three  intervals.  The 
negative  correlation  for  at  least  the  first  spacing  interval  is  evident  and 
therefore  second  order  auto-regressive  (AR)  and  moving  average  models  (MA) 
have  been  tried  . 

The  AR  model  is 

y(n)  =  a^y(n-l)  +a2y(n-2)  +  W(n)  (2.4) 

and  the  MA  model  is 

y(n)  =  b.|  W  (n)  W  (n-1)  W(n-2) 


(2.5) 


>V  ' 

:a:- 

The  test  of  a  perfect  model  is 
random,  hence  the  tables  show 
models  after  the  coefficients 

that  the  residuals  Wfn)  are  iniee-'  rierfe  t!v 
the  autocorrelation  of  the  residuals  of  t  h'*'.  •' 
have  been  fitted  (appendix  8.1). 

TABLE  2.3 

ANALYSIS  OF  DIFFERENCED  DATA  FOR  6  MINS . INTERVAL 

Hi 

MODEL 

RMS  W(n) 
DEG/HR 

AUTO-CORRELATION 

1  2 

OF  RESIDUALS 

3 

■ 

y  (n ) 

0.0012 

-0.207  -0.283 

O.ObO  O.DhO 

f 

AR: 

=-0.285 

o.oon 

-0.078  -0.108 

0.283  -O.OHu 

=-0.343 

i 

MA: 

b.|  =  -O.OQO395 

bj  =  -0.000468 

0.999 

-0.018  0.0002  - 

0.046  0.064 

83  =  0.00103 

Mf 

TABLE  2.4 

ANALYSIS  OF  DIFFERENCED  DATA  FOR  25.6  MIN. INTERVAL 

p;: 

MODEL 

RMS  W(n) 
DEC/HR 

AUTO-CORRELATION 

1  2 

OF  RESIDUALS 

3  4 

y(a) 

a^  =  -0.464 

0.00071 

0.00063 

-0.381  -0.027 

0.124  0.210 

AR; 

'■A 

i 

-0.063  -0.113 

0.214  0.137 

32  =-0.207 

MA: 

b.,  =  -0.000020 

b2  =-0.000312 
63  =  0.000637 

0.999 

-0.020  -0.033 

0.075  0.179 

>,.v 

TABLE  2.5 

ANALYSIS  OF  DIFFERENCED  DATA  FOR  60  MIN.  INTERVAL 

N jbN^ 

MODEL 

RMS  W(n) 
DEG/HR 

AUTO-CORRELATION 

1  2 

OF  RESIDUALS 

3  4 

»*•  •** 

* 

AR: 

y  (n  ) 

a^  =-0.310 

82  =  -0.078 

0.0016 

0.00148 

-0.275  0.009 

-0.024  -0.095 

0.154  -0.064 

0.204  -0.090 

MA: 

b^  =  0.000014 

0.981 

-0.023  -0.062 

0.199  -0.095 

63 . 


-  0.000455 
0.00153 


The  MA  model  is  marginally  to  be  preferred  especially  for  the  important  6  min, 
interval,  and  has  been  employed  theoretically  in  section  4  below,  although  a 
more  convincing  demonstration  of  FADS  is  considered  to  be  that  employing  the 
actual  6  min.  time  series  of  drift  data  in  a  simulation. 
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It  is  interesting  in  a  wider  context  to  speculate  if  a. simple  noise  and  drift 
model  of  the  gyro  in  continuous  time  fits  the  time-series  lata  wheij  it  is 
converted  to  the  three  different  Intervals  employed.  First  we  note  a  useful 
model  which  at  least  describes  the  time  series  with  the  longer  intervals  of 
25.6  and  60  mins.  Define  the  time  series  drift  data  as,  the  sum  of  two  series 
z(n)  and  v(n),  thus 

D(u  )  :  z(u)-f  V(n)  (2.6) 

One  series  is  a  random  walk,  having  no  mean  value, 

z(n)  =  z(n-1)  +  (n )  (2.7) 

and  the  other  series  is  auto-correlated  with  zero  mean  value.  Thus 

v(n)=|3v(n-1)+W2Cn)  (2.8) 

where  W,|(n)  and  W^Cn)  are  purely  random  with  zero  mean  values.  If  the  series 
D(n)  is  differenced  the  residuals  are 


y(n)  :  D(n)  -D(n-l)  =  W,(n)  -(1-| 


from  which  we  deduce 


=  (.a*2XT^ 


)  v(n-1  )  4-  W,(n)  (2.9) 


(2.10) 


and  the  normalised  autocorrelations  of  y(n)  are 


=  -(l-^)/[(a-42)(1-4(i  )] 

i  j>1 


) 

)  (2.11) 
) 


Compare  the  autocorrelations  of  y(n)  in  tables  2.3,  2.9  and  2.5.  The  6  minute 
data  of  fig. 2. 3  does  not  fit  very  well  due  to  the  large  negative  correlation 
(*2  but  the  fit  is  acceptable  to  the  data  for  25.6  and  60  min.  intervals  using 
simply/S=0,  i.e.  a  purely  random  term  v(n)  added  to  the  random  walk  z(n). 

Table  2.6  summarises  the  parameters  of  this  model. 


TABLE  2.6  PARAMETERS  OF  SIMPLE  DRIFT  MODELS 


INTERVALS  MINS. 

STAND.  DEVIATIONS  DEG/HR 

RANDOM  ADDITIVE 

INCREMENTS  OF  RANDOM 

TERM 

WALK 

25.6 

0.000938 

0.000396 

60 

0.000839 

0.00107 

The  above  models  might  be  useful  for  simulation  purposes  but  they  are  not 
mutually  consistent  in  terms  of  an  underlying  continuous  time  model.  For 
example  the  implied  low-frequency  spectral  density  is  not  the  same  and  the 
increments  of  the  random  walk  are  not  in  the  right  ratio  for  the  two  intervals. 
One  complication  is  doubtless  that  averaging  introduces  some  serial  correlat¬ 
ion  in  a  random  walk  model.  Mo  further  efforts  have  therefore  been  made  to 
fit  the  data  to  a  single  continuous  time  model,  but  the  presence  of  a  signif¬ 
icant  drift  component  that  behaves  as  a  random  walk  is  clearly  an  important 
feature  to  bear  in  mind. 


2.3  MICROPROCESSOR  DEVELOPMENTS 

Ir  summarising  hardware  and  software  developments  at  British  Aerospace 
(Bristol),  it  is  important  to  distinguish  between  the  S  (System)  and  D 
(Demonstration)  programme  of  FADS.  The  former  is  more  general  and  refers  to  a 
future  system  for  flight  application,  whereas  the  D  programme  is  concerned 
only  with  the  specific  system  and  hardware  for  the  demonstration  on  the  air¬ 
bearing  platform  already  mentioned  in  the  introduction. 


,  Am,  - 

(’■T-T'  -.  -Vs 


Thus  the  hardware  for  the  S  Model  (future  flight  version)  cannot  yet  be  def¬ 
ined,  although  for  the  next  few  years  a  likely  candidate  is^the  l6-bit  Texas 
9989  microprocessor.  It  has  the  special  Texas  so-called  "i'^L"  technology  to 
provide  an  acceptable  degree  of  resistance  to  space  radiation  and  has  recently 
been  adopted  for  LSAT.  At  present, flight  software  has  to  be  written  in 
assembler  code  but  ESA  may  adopt  a  suitable  high  level  language  at  a  future 
date  e.g.  a  recent  invitation  from  the  agency  to  tender  for  studies  of 
possible  high  level  languages. 


s  s 


f 
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The  D  model  hardware  is  on  the  other  hand  merely  to  "elegant  breadboard" 
standards.  Early  comparative  studies  restricted  the  choice  to  the  following 
microprocessors:  Texas  9989,  Intel  8086,  Zilog  Z8000  and  the  Motorola  68000. 

The  choice  was  not  obvious  but  in  fact  the  Intel  8086  was  selected.  It  has 
already  been  classified  by  ESA  as  "Category  3,  qualifiable"  and  claims  have 
been  made  (Ref. 7)  that  it  is  suitable  for  low  orbit  missions  of  limited  life¬ 
times.  Furthermore,  it  is  understood  that  a  CMOS  (radiation  tolerant)  version 
of  the  Intel  8086  processor  is  available. 

As  regards  software  for  the  D  programme,  Pascal  has  been  chosen  for  the 
following  reasons: 

(a)  it  is  processor  independent  but  available  for  all  the  possible 
processors  for  FADS. 

(b)  its  structure  is  such  that  it  can  be  employed  to  define  programs  at 
various  levels  of  abstraction  without  ambiguity. 

(c)  it  has  been  defined  as  an  international  standard,  hence  transportability 
of  programs. 

The  current  developments  at  BAe-Bristol  on  the  FADS  hardware  and  software  are 
now  summarised.  First,  following  analysis  and  simulations  described  in 
sections  3  and  ,  the  application  software  is  developed  and  tested  (in  Pascal) 
off-line.  This  includes  star  table  generation  and  updating,  the  estimation 
algorithm,  and  the  state  observer.  Processing  of  signals  from  the  star  sensor 
to  enhance  accuracy  is  carried  out  in  the  MSDS  electronics  of  the  star  sensor. 
Similarly  the  Ferranti  125  gyro  has  its  own  built-in  electronics  to  provide 
the  rate  at  1/10th  sec.  intervals  (averaged  throughout  such  intervals), 
although  fine  correction  for  drift  rate  is  implemented  inside  the  FADS 
processor.  The  final  editing  of  the  application  software  is  carried  out  on 
the  Intel  Series  III  Microcomputer  Development  System,  before  compilation  and 
transfer  to  an  Intel  Single-Board-Computer  (SBC)  86/05. 

The  operating  system  of  the  Series  III  would  of  course  be  far  too  elaborate  for 
the  SBC  and  therefore  a  much  simpler  operating  system  has  been  developed.  It 
is  based  upon  an  ESTEC  design  documented  in  1979(ref.8).  Interfacing  with  the 
gyro  unit,  star  sensor  and  actuators  is  via  a  serial  digital  data  bus  designed 
according  to  the  new  ESA  specifications  known  as  MACS  (modular  attitude  control 
system),  or  at  least  a  provisional  version  of  the  specification.  The  FADS 
demonstration  will  become  therefore  a  candidate  for  subsequent  testing  and 
demonstration  of  MACS. 


Before  the  FADS  processor  is  delivered  as  an  SBC  86/05,  for  use  by  Marconi 
Space  and  Defence  Systems  on  the  experimental  set-up,  it  will  be  tested  by 
real-time  simulation  at  Bristol.  For  this,  test  software  is  being  developed  to 
simulate  (in  real-time)  the  star  sensor,  the  gyro  units  and  the  actuators  and 
dynamics  of  an  illustrative  configuration  e.g.  LSAT  in  the  normal  mode.  This 
test  software  will  also  be  implemented  on  the  Intel  single-board-computers. 
However,  whereas  implementation  of  FADS  is  being  deliberately  restricted  to  the 
basic  Intel  8086  which  has  no  floating  point  hardware  operations,  the  test 
simulation  boards  can  take  advantage  of  the  greater  numerical  processing 
capability  of  the  extra  8087  board,  which  does  include  floating  point  operat¬ 
ions  in  hardware.  Control  of  the  simulation  experiments  and  data  logging  will 
be  by  means  of  a  Texas  990  minicomputer. 


FORMULATION  OF  THE  FADS  ALGORITHM 


DISCUSSION 

The  intermittent  nature  of  the  data  from  a  star-crossing  detector  makes  the 
process  of  combining  gyro  and  star  sensor  measurements  much  more  involved  than 
when  continuous  data  is  available  e.g.  from  a  star  tracker  or  RF  sensor.  For 
this  reason  the  application  of  the  Kalman  Filter  has  been  common  (ref. 9)  and 
was  employed  in  the  earlier  SIOS  (strapdown  inertial  optical  system)  studies 
by  RAE  and  BAe-Bristol  (ref.1).  A  sixth-order  state  estimator  was  employed 
for  three  satellite  attitude  (Euler)  angles  and  three  drift  rates  of  the  gyros. 
Note  that,  because  the  star  crossings  occur  intermittently,  the  non-stationary 
form  of  the  Kalwan  Filter  must  be  employed  and  the  covariance  matrix  cannot  be 
pre-computed .  This,  together  with  the  inclusion  of  the  frequently  sampled 
gyro  measurements  in  the  propagation  of  the  state  vector,  made  the  onboard 
processing  load  rather  heavy. 

In  this  project  (the  sequel  to  SIOS)  the  estimation  problem  has  been  reformul¬ 
ated  to  take  advantage  of  the  fact  that  the  non-drift  random  component  of  gyro 
error,  when  expressed  as  an  angle,  is  very  much  less  than  the  star  sensor 
error,  viz  about  0.03  arc  second  as  noted  in  section  2.2  above.  The  problem 
can  then  be  expressed  as  one  of  estimating  and  updating  six  slowly  varying 
near-constant  parameters. 


lO-S 


3.2 


Propagation  forward  of  the  filter  state  equations  does  not  then  arise, 
although  a  matrix  analogous  to  the  covariance  matrix  must  still  be  propagated 
forward  at  each  star  sighting. 

The  planning  horizons  of  this  project  have  been  shortened  to  the  extent  that  it 
was  considered  necessary  that  implementation  should  be  possible  on  the  l<ind  of 
l6-bit  microprocessor  that  is  already  space  qualified  for  long  lifetime  high 
orbits.  Examples  are  the  Ferranti  TOOL  and  the  Texas  9989  for  which  only 
hardware  fixed-point  multiplication  could  be  assumed.  Further  changes  to  the 
algorithm  have  therefore  been  formulated  to  make  it  less  sensitive  to  limited 
wordlength  fixed-point  operations.  The  final  result,  as  detailed  below,  is 
recursive  weighted  least-squares  but  in  a  "square  root"  form,  similar  to  an 
early  algorithm  of  Potter  (ref. 10)  in  which  no  matrix  inversion  is  required. 

The  final  form  bears  naturally  a  marked  resemblance  to  the  Kalman  Filter  in  a 
factorised  form;  see  for  example  Kaminski's  survey  paper  (ref. 11).  A  ninth 
order  form  of  estimator  was  studied  at  an  earlier  stage  (ref. 2)  but  was 
abandoned  when  the  more  elementary  processor  was  assumed.  It  included  estim¬ 
ation  of  three  out  of  four  sensor  misalignments,  but  all  the  estimations  were 
noisier  and  it  was  considered  of  doubtful  benefit.  Calibration  of  misalign¬ 
ments  with  reference  to  ground  reference  points  is  henceforth  assumed. 

Perhaps  reference  should  also  be  made  to  publications  concerned  with  quarter- 
nions  (4  Euler  parameters)  instead  of  the  3  Euler  angles.  They  are  usually  in 
the  context  of  either  strapdown  inertial  navigation  systems  (ref. 13)  or  attit¬ 
ude  estimation  systems  associated  with  a  three-gimbal  inertial  platform  (ref. 
14,15),  also  forming  part  of  a  guidance  system  and  processing  almost  continuous 
angular  data  from  a  star  tracker.  In  either  case  the  use  of  quarternicns  is 
shown  to  have  advantages  in  carrying  out  frequent  transformations  of  vectors 
from  one  system  to  another,  because  trigonometric  functions  are  obviated.  It 
is  a  very  different  application  of  Kalman  Filtering,  compared  to  the  simpler 
problem  here,  for  which  the  use  o^  quarternions  is  not  considered  to  be 
attractive  in  view  of  the  extra  complications  of  a  singular  seven-dimensional 
covariance  matrix  (ref. 15). 

SUMMARY  OF  ANALYTICAL  DEVELOPMENT 


In  order  to  concentrate  on  the  principal  features  small  error  terms  are  omitted 
below,  although  the  results  of  error  analyses  (ref. 2)  are  quoted  in  section  4 
on  performance.  The  vector  Vg  of  gyro  output  rate  signals  is  (ref.1)  for  unit 
scale  factor 


Vg  =  w 


r*  "i 

o 


(3.1) 


where  to  is  the  vector  of  true  inertial  satellite  rates  and  d  is  the  vector  of 
drift  rates.  The  third  term  is  a  torquer  signal  to  offset  the  orbital  rate. 

Let  (4,6,  vf^)  be  the  satellite  Euler  angles  in  roll, 

pitch  and  yaw  relative  to  the  orbital  earth-pointing  rotating  axes,  then 


ttl  + 


Eliminating  u>  , 


rxi 

Pot  +  Vj  +  d 


where 


P  » 


O 

O 


O 

O  O 
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The  solution  of  (3.3)  is 


It)  -•  +  r$  (t-T)[\/g(-c)+ d(r)]dr 


where 


§i(t) 


cesMot 

O 

-sin 


O 

1 

o 


sinu^ 

O 

cos  H)et 


(3.2) 


(3.3) 


(3.11) 


(3.5) 


(3.6) 


Note  that  (3.3)  is  often  approximated  by  omitting  P,  which  is  sufficiently 
accurate  if  feedback  control  is  applied  to  zero  the  satellite  angles,  but  the 
exact  form  is  retained  here  to  permit  application  to  satellites  without  tight 
attitude  control. 


and  approximate  d(‘C)in  (3.5)  by  a  constant  drift  rate  d.  Equation  (3.5)  can  be 
written 


iivtoJat'  O  (l-COSUo±'j 

^.(f)  =  t/o),  O  Wot  o 

“(I -cos  Wat)  O  S(nu>st 


and  in  (2.1) 


(3.11) 


Then,  in  the  absence  of  measurement  errors,  the  results  can  be  condensed  to 


-Cv(tO  -  tJjC 


f«  -k  v(ta^  -  cjx 


(3.12) 


where  h^ ,  ,  b^^ ,  c^  are  quoted  in  appendix  8.2. 


In  equations  (3.12),  note  that  y  ,  z  are  the  star-sensor  errors  subject  to 
typical  errors  of  several  arc-seconds,  whereas  the  associated  terms  in  v(t  ) 
arise  from  integrations  of  the  gyro  rate  signals  between  star  sightings. 

Random  errors  in  the  latter  are  the  order  of  0.03  arc-second  i.e.  negligible 
compared  to  star-sensor  errors.  Therefore ^these  terms  are  merely  to  produce 
the  motion  connected  measurements  (y  ,  ) .  Given  a  number  of  such  star¬ 

sensor  measurements,  equation  (3.12)"can  form  the  basis  of  a  weighted  least- 
square  fitting  procedure  to  estimate  the  vector  x  at  (3.10),  hence  permitting 
calculation  of  drift  rates,  satellite  angles  by  (3.8)  and  rates  by  (3.3). 


The  development  of  a  sequential  solution  to  this  problem  of  weighted  least- 
squares  fitting  is  noted  in  appendix  8.2.  The  weighting  of  recent  data  is 
introduced  to  place  decreasing  emphasis  on  old  data  and  hence  an  estimator  that 
permits  updating  for  parameters  that  change  slowly.  Thus,  with  weighting 
decreasing  as  a  geometric  progression  of  ratio^,  the  time  constant  of  the 
'memory'  is 


■'log^^  sightings 

From  appendix  (8.2)  the  sequential  solution  for  the  estimates  is 


(3.13) 


(3.14) 


’s^-Jr  E...  -  pi-  B„.,  H„[h;  I  J'h;  B... 

H.  “  c-l 


(3.15) 


(3.16) 


Thus,  the  matrix  Inversion  in  (3.15)  is  merely  2x2. 


The  above  procedure  generates  mean-square  consistent  estimates  subject  to 
certain  formal  restrictions  (ref. 12),  regardless  of  the  initial  conditions 
imposed  upon  the  sequences  Sc^  and  B  .  Furthermore  it  can  be  shown  (ref.  12) 


that  the  use  of  initial  conditions 


,  Bo  »  R«/o-* 
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3.3 


generates  the  conditional  expectation  of  given  the  measy rement  s ,  in  the  case 
of  independent  normal  measurement  errors  of  variance  >  9C,  being  on  a  priori 
normal  distribution  with  zero  mean  and  covariance  Ro .  Equation  (3.17)  is 
therefore  a  useful  guide  for  starting  the  above  sequential  estimator. 

SQUARE  ROOT  FORMULATION 


The  matrix  Bn  in  equation  (3.15)  is  proportional  to  the  a  posteriori  covariance 
matrix  of  errors  in  estimating  the  six  components  of  x,  at  (3.10).  For  very 
accurate  estimates  this  matrix  approaches  singularity,  hence  the  possibility  of 
sensitivity  to  limited  word  length,  especially  when  rapid  convergence  occurs. 
The  symmetric  matrix  Bn  should  remain  positive  definite  out  this  cannot  be 
assumed  in  demanding  situations  with  limited  word  lengths.  Therefore  decompose 

^n-l 

Bn.i  =  S/  (3.18) 


where  the  non-unique  matrix  S  is  referred  to  as  the  'square  root  matrix'.  It 
requires  approximately  only  hSlf  the  accuracy  of  that  required  to  store  ^ 
and,  whatever  it  is  evident  that  Bj,  ^  is  always  at  least  positive  semi- 

def inite .  5n  example  of  (3.18)  is  the  Cnolesky  decomposition  in  which  S  is 
upper  right  triangular,  but  no  such  restriction  is  implied  above. 


The  transformation  of  algorithm  (3.111,  3.15)  to 
in  appendix  8.2  and  the  result  can  be  stated  as 


the  square 
follows . 


root 


form  is  derived 


(3.19) 


where 


} 


(3.20) 


and 


(3.21) 


The  above  solution  is  written  out  only  for  scalar  measurements,  i.e.  it  implies  that  the  pair 
of  measurements  at  (3.12)  are  treated  as  two  separate  scalar  measurements .  The  actual  fitting 
problem  Involves  processing  the  simultaneous  occurence  of  two  measurements  (star  crossing  angle 
and  time).  If  the  data  is  not  weighted  (^=  1)  then  there  is  no  objection  to  treating  a  pair 
of  measurements  as  two  successive  scalar'^asurements .  The  above  algorithm  has  been  employed 
even  for  values  less  than  unity,  because  anticipated  values  foj^are  close  to  unity,  when  the 
slightly  different  weighting  for  measurements  at  the  same  time  would  be  a  negligible  consid¬ 
eration.  In  this  way  the  square  root  formulation  can  be  applied  in  its  simplest  form,  with  no 
matrix  inversion. 


PERFORMANCE 
SOURCES  OF  ERROR 


The  relevant  sources  of  error  are  summarised  below. 

(a)  Star  sensor  and  associated  errors  (one  sigma): 

Star  sensor  2.0  arc  sec  (USDS  provisional) 

Star  e  phemeris  1.0  arc  sec  (Section  4.3,  ref.1) 

Orbit  determination  1.4  arc  sec  (Appendix  M,  ref.l) 

Composite  rms  error,  =  2.6  arc  sec  (4.1) 

Sensor  misalignments  assumed  to  be  calibrated  with  reference  to  ground  reference 
points . 

(b)  Gyro  random  noise,  above  2mHz: 

Order  of  0.03  deg  (see  section  2.2) 

(c)  Gyro  drift,  below  2mHz: 

See  section  2.2 

(d)  Gyro  misalignment: 

Better  than  2  arc  min  (ref. 16) 


(e) 


Gyro  scale  factor: 

0.1  per  cent  (ref.l6) 


Effects  (b),  (d)  and  (e )  will  be  very  small  (ref. 2)  and  are  henceforth  Ignored.  In.stead 
attention  is  concentrated  below  on  the  principal  sources  of  error,  viz.  the  random  composite 
star-sensor  error  and  gyro  drift.  Note  that  errors  that  might  arise  through  using  a  state 
observer  are  not  considered  here.  As  mentioned  in  section  2.3,  an  observer  is  included  in  the 
D  model  for  the  experimental  demonstration  with  a  rigid  body  load,  but  significant  difficul¬ 
ties  vould  be  encountered  (due  to  parameter  mismatch)  if  this  were  attempted  for  a  flexible 
load. 

EFFEtir  OF  COMPOSITE  STAR-SENSOR  ERROR 

The  covariance  matrix  of  errors  in  estimating  the  six  components  of  in  (3.10)  is  theoretically 
equal  to  B  AT  whereff is  the  r.m.s.  composite  star-sensor  error.  Table  4.1  shows  therefore  the 
standard  deviations  of  the  errors  in  estimating  angles  calculated  in  this  way  for  the  illus¬ 
trative  sensor  geometry  (fig.2.1) 

=  20  deg,  JT,  =  0  deg. 

p,  :-20  deg,  ^2  =  82.4  deg. 

These  sensors  are  orthogonal  and  it  is  assumed  that  this  desirable  orinetation  would  be 
achieved  at  least  approximately.  Table  4.1  was  obtained  by  applying  the  equations  of  the 
square-root  sequential  estimator  of  section  3-3.  The  results  can  however  be  interpreted  only 
approximately  because  they  depend  on  the  sequence  of  sensors  (1  and  2)  and  the  distribution  of 
crossings  over  the  length  of  the  slit.  Memory  time  is  calculated  according  to  (3-13).  Notice 
that  the  standard  deviations  are  quoted  in  a  dimensionless  form,  hence (Tat  (4.1)  must  be 
introduced . 

The  at  and  dd  of  table  4.1  are  defined  as  follows: 

where  is  the  orbital  rate. 


TABLE  4.1  laUSTRATIVE  ERRORS  DUE  TO  STAR  SENSORS 


SENSORS 

WEIGHTING 

MEMORY, 

NO. SIGHTINGS 

A 

4/<r 

STAND.  DEVIATIONS 

^/(T 

Eqn 

(4.2) 

2 

0.95 

19.5 

0.47 

0.67 

0.47 

0.545 

0.270 

2 

0.90 

9.49 

0.63 

1.29 

0.64 

0.907 

0.360 

2 

0.80 

4.48 

0.98 

3.69 

0.96 

2.27 

0.522 

2 

0.70 

2.80 

1.39 

7.74 

1.29 

4.60 

0.699 

2 

0.50 

1.44 

2.85 

24.4 

2.26 

14.2 

0.854 

1 

0.95 

19.5 

5.09 

2.01 

0.42 

3.17 

2.94 

1 

0.90 

9.49 

6.53 

2.71 

0.57 

4.10 

3.78 

Because  star  crossings  occur  typically  over  the  length  of  the  slit  the  vectors  b  amd  c  of 
(3-12)  vary  from  one  crossing  to  the  next.  Estimation  is  consequently  quite  feasible  w?th  only 
one  star  sensor,  although  the  accuracy  about  an  axis  through  the  centre  of  the  slit  is  naturally 
degraded.  Table  4.1  includes  two  cases  rerun  with  only  sensor  1  operative.  Note  that  the 
results  of  table  4.1  are  independent  (as  quoted)  of  the  kind  of  orbit,  such  as  low-earth  or 
geostationary,  because  the  memory  factor  is  expressed  as  number  of  sightings  independent  of  the 
time  between  star  transits,  anddJof  equation  (4.2)  is  dimensionless. 


EFFECT  OF  GYRO  DRIFT 


Following  equation  (3.8)  the  estimated  angle  is; 

i  (-t)  =  §  -+•  vtt)  i  tn^-t  -  (4.3) 

where  the  actual  drift  rate  between  "tK-i  and  is  el^.,  and  the  estimate  a„  is 
obtained  gt  .  Star  sensor  errors  give  rise  to  fluctuations  in  itio  estimates 
cion  and  dn  ,  as  examined  in  Section  3,  but  we  are  concerned  here  wit  li  t  tie 
effect  of  gyro  drift.  It  gives  rise  to  additional  errors  in  the  est  imates  and 
(in  between  star  transits)  an  error  due  to  imperfect  correction  for  t  lie  gyro 
drift  rate.  The  estimated  angular  rates  are  incidentally 

^Ct)  *  P^Lt)  •+■  Yjtt)  +  oIh  •>  <tn*,  (4.4) 

See  Figure  4.1  for  a  block  schematic  of  the  whole  FADS  estimator. 


Compared  to  (4.3),  the  true  vector  of  Euler  angles  is  given  by  ( 3 .  S )  and,  lienee, 
by  subtraction  the  error  is  yt 


uu  LI  cn- u  j.  ui  I  Liitr  criLui  x 

-h§-lt)d^  -  lx)  J-c 


(  4  .  S  ) 


VVhen  the  interval  between  sightings  is  much  smaller  than  the  orbital  period, 
olCC)  in  (4.5)  can  be  approximated  by  the  mean  value  in  each  subinterval.  This 
permits  the  following  expression  which  is  written  out  for  the  worst  case  of 
t  =  >  i.e.  just  before  a  fresh  star  transit. 


Equation  (4.6)  is  convenient  for  employing  empirical  gyro  drive  data  (as 
provided  by  Ferranti)  averaged  over  a  typical  subinterval,  such  as  6  minutes  for 
a  low-Earth  obrit.  Thus,  by  inserting  such  sequences  into  an  off-line  simula¬ 
tion  of  the  FADS  square-root  sequential  estimator  of  Section  3,  it  tias  been 
possible  to  compute  the  resultant  errors  due  to  gyro  drift  fluctuations.  The 
results  depend  upon  the  geometry  and  sequence  of  transits  wliich  would  not 
naturally  be  at  equal  sub-intervals. 

The  following  Table  4.2  can,  therefore,  be  regarded  only  as  illustrative.  The 
rms  values  were  calculated  over  approximately  100  samples,  after  allowing  the 
first  sixteen  samples  for  convergence  of  the  estimator.  In  fact,  provided  large 
diagonal  elements  are  used  to  prime  the  matrix  S  of  the  square-root  filter, 
rapid  convergence  was  achieved  in  only  a  few  transits  more  than  is  needed  for 
the  non-iterative  computation  by  matrix  inversion.  The  sensor  geometry  was  as 
defined  in  Section  4.2  for  two  sensors.  Independent  drift  rate  fluctuations 
were  applied  in  roll,  pitch  and  yaw  and  refers  to  a  transit,  aHi  being 
applied  to  each  measurement  of  a  pair.  ' 

TABLE  4.2:  ILLUSTRATIVE  ERRORS  DUE  TO  GYRO  DRIFT 

(98  min.  orbit  with  6  rains,  between  star  transits). 

RMS  Estimation  erros,  arc-seconds. 


I 


& 

0.95 

1 .40 

1 .89 

1  .  38 

0.90 

1 .06 

1.08 

1  .02 

0.80 

0.81 

0 . 66 

0.74 

0.70 

0.53 

0 . 54 

0.65 

In  order  to  e.stimnte  performT’ioe  in  ,n  hou'~  orhit  the  deni/rn 
of  M.SDS  (ref.  17)  have  been  ao^ented.  ftr  i'<ii  rated  in  t  ihle  ?.1. 
sitlvlty  rorrespnnd  i  nir  to  .•^tar  mai'n  i  t  inler  5-6.  the  mei'  rr-nssing 
be  in  the  range  3-9  minutes,  henre  the  use  of  (i  minute,  in  taliLe 


p  r  f-  d  i  r  t  i  o  n  .a 
with  a  sen- 
t 1  me  wou 1 d 

9  .  ^  . 


P>(m)  »  $ 


(t„-t„_,)d(n-|)  3  p(0)»O 


(4-.  60)::. 


* 


TABLE  4.3:  ILLUSTRATIVE  ERRORS  DUE  TO  GYRO  DRIFT 

(24  hour  orbit  with  6  mins,  between  star  transits) 
RMS  Estimation  errors,  arc-seconds. 


<)> 

e 

0.95 

1 . 98 

1  .  8q 

1  w  U 

0.90 

1  .  1  '1 

1  .  O” 

1.07 

0.80 

0.75 

0.65 

n.69 

0.70 

0.65 

0.5''- 

0  .  ( I 

OVERALL  PERFORMANCE 

The  results  of  Sections  4.2  and  4.3  can  now  be  combined  to  provide  represents 
tive  errors  in  estimating  satellite  attitude  angles  by  FADS  using  a  star¬ 
crossing  detector.  The  composite  random  star  sensor  error  of  2.6  arc-seconds 
of  equation  (4.1)  has  been  employed  in  conjunction  with  Table  4.1.  Table  4.4 
below  lists  the  results  in  terms  of  ot  as  defined  at  (4.2),  viz:  RMS  of  roll 
pitch  and  yaw  errors. 

TABLE  4.4:  REPRESENTATIVE  TOTAL  ANGULAR  ERRORS 

RMS  Estimation  Errors  (•<  of  eqn .  (4.2)  arc-seconds) 


o<,  ( sensor ) 

98  min. 

o^j(drift) 

orbit 

24  hour 

orbit 

fj  5,*  -t  Sx 

(driftl^ 

0.95 

1.42 

1.57 

2.12 

1.9? 

2.39 

0.90 

2.36 

1.05 

2.58 

1 .09 

2.60 

0.80 

5.90 

5.95 

0.70 

5.94 

0.70 

11.96 

0.58 

11.97 

0.60 

11.98 

It  is  evident  that  a  long  memory  {yU  approaching  unity)  is  desirable  to  smooth 
the  random  errors  of  the  star  sensor  but  a  short  memory  much  less  than 

unity)  permits  more  rapid  adjustment  to  changes  in  the  gyro  drift  rates.  The 
results  for  the  two  l^inds  of  orbits  may  be  summarised  as  follows: 

(a)  Low-Earth  orbit:  optimum  memory  factory  approximately  equal  to  0.95 
(equivalent  to  time  constant  of  1.2  orbital  periods)  when  total  rms  error 

St  2.1  arc-seconds. 

(b)  24  hour  orbit:  optimum  memory  factor,^  approximately  equal  to  0.95 

(equivalent  to  time  constant  of  1.2  orbital  periods)  when  total  rms  error 

tt2 . 1*  arc-seconds  . 

Performance  would  Improve  with  more  frequent  .star  transits,  e.g.  if  a  more 
■sensitive  optical  .system  pei-riilted  detection  down  to  magnitude  4  stars  in 
the  case  of  the  low  orbit  with  the  higher  scan  rate. 

CONCLUDING  REMARKS 

The  Filtered  Attitude  Determination  -System  described  in  this  paper  is  a 
promising  prototype  for  use  in  future  earth-pointing  .satellites,  with  one 
sigma  acc\:racy  the  order  of  2  arc-seconds  for  low-ea"th  or  geo.st at  i onary 
orbits.  The  experimental  demonstration  will  permit  an  early  illustration  of 
the  new  E.SA  interface  specifications,  viz:  MACS  or  'Modular  Attitude  Control 
Systems'.  The  estimating  algorithm  adopted  is  considered  especially  suitable 
for  the  microprocessors  currently  qualified  for  space  applications,  i.e.  a 
hasir  16  bit  wordlength  without  hardware  floating-point  operations. 

Recent  tests  on  the  Ferranti  125  gyro  have  enabled  a  more  careful  evaluation  of 
drift  over  many  hours,  which  is  especially  relevant  to  a  star-crossing  strap- 
down-  inert  ia  1-opt  ical  system.  Although  a  unifying  simple  model  has  not  emerged, 
the  very  low-frequency  behaviour  is  dominated  by  a  random  wal)i  process.  Never¬ 
theless,  at  least  for  low-earth  orbits,  the  performance  of  the  gyro  is  such 
that  it  is  not  the  serious  limitation  that  was  expected. 


.s'  ■ 


•  • 


Future  developments  of  FADS  will  probably  include  modules  for  use  with  star 
traciters,  RF  sensors  and  possibly  state  observers  for  flexible  spacecraft. 
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APPENDICt-JS 


ANALYSIS  OF  GYRO  DATA 


The  averaging  Process 


The  first  results  required  refer  to  the  process  of  averagirjK  over  an  interval  of  time  T. 
It  will  be  sufficient  to  characterise  the  input  as  one  witli  the  auto-correlation  friction 

x(t)x{t+T)  =  a^exp(-W^t)  (3.1) 

and  spectral  density  (per  rad/s) 

(|#)/0  "“"O  ‘3.2) 

The  variance  of  the  output  y,  for  input  x  is 

x(^)x  tx^)ar^  (8,3) 

2  rT  rx 

=  -|v  dt  I  exp(-W^lri-Z^l)  dr^ 

[w^  -  1  ‘8.4) 

Denote  by  y^  the  value  of  y  in  the  ith  interval^ then  by  a  very  similar  calculation  we 
deduce 


ViYi,!  =  (  1  -e-«»T)  2  (8.5) 

o 

and  consequently  from  (8.4)  and  (8.5)  the  correlation  between  successive  levels  y.  is 


fl  :  J  (l-e"’^o'‘^j  (w^T-1+e"'^o'^] 


9r . 


W  T  »1 
0 


(8.6)  approaches  the  limiting  form 


^  '  w 


and  the  limit  of  (8.4)  yields  similarly 


"2  ^  2a^ 


I 


It  follows  that  if  this  form  of  averaging  is  applied  to  a  process  with  a  ..  ^h 

greater  than  1/_,  then  the  serial  correlation  of  y.  will  be  negligible.  Thus  y  .  .1  be 
a  random  rectan^lar  wave,  with  the  same  mean  value  as  the  input,  and  the  well-ki  ..i  auto¬ 
correlation  function. 

R(t)  =  2a^(l-'^/„l:  Oi,t<.T  (8.9) 

o 

R(t  )  =  0  ;  t  >  T 

The  corresponding  spectral^ensity  function  is 

R  (-c")  ces  oix- 

which  has  bandwidth  to  half  pov«r 

=  0.443/  Hz  '  1  ' 


I  •) 


r 


if  T  is  in  seconds. 
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Fitting  AR  and  MA  Nbdels 


Standard  computer  packages  are  available  but,  since  only  seoond-ordfr  motel:-.  «■.>  in  i.-'-, 
simpler  calculations  sufficed.  They  are  specified  here  as  a  matter'  of  convenieneo . 

Fittiig  to  autoregressive  (AR)  models  is  easy  because  it  reduces  to  linear  least -n.|uar'o.  . 
Thus  to  fit  (4.4)  asaiming  y(n)  is  measured  perfectly,  (a,,aT)  ar-’  t^  tie-  cho.p>i  t  , 

*/-*.  p  '  _j_  I  e 

^  toj 

put  S  =  ^  -.1 

and  the  solutions  can  be  expressed  as 

~  t  ^1*.  ^oo  ~  5»a.  5oi  )/  ^ 

^2.  (  ^ox  ^11  ^  Sia  )/ ^ 

where 

D  ~  (  'S||  -Soo  >^OI  )  i.l-.l 

If  the  same  type  of  approach  is  applied  to  the  moving  average  (MA)  model  (4.5),  it  tvcoiTies 
a  nonlinear  minimization  for  which  a  computer  routine  should  be  employed.  In  order  to 
avoid  this  we  adopted  the  approximate  approach  of  fitting  to  the  oomruted  variance  ani 
correlations  as  follows.  Thus  from  (4.5)  we  can  show  that 


+  tj 

=  b»b,+  bjba 

b,t, 


(B.15) 


There  are  three  nonlinear  sinultaneous  equations  to  solve  for  the  three  unknowns.  Sub¬ 
stitute  ,  .  ^  \ 

b,  =  sin6  cos  ) 


ba.®Ojm05in4^ 

bj  =  a  COS  © 


(8.16) 


leaving  two  equations  in  ^  and  <p.  Substitute  t  =  tanfl  ,  to  produce  one  nonlinear  equation  in 
t,  etc. 

ANALfTICAL  DETAILS  OF  THE  ESTIMATOR 


Relations  for  Section  3-2 

C  =  (  )  0  ,  -cos>^  ) 

“  ton (CiCg  —  -Si 

^  _  -tan  (Jn,  (c.s*+ 5i  Co) 

-tanA«(e,5o+ 5,  cT^) 

,  _  r  S.Co 

—  t an  |3 |— Co  •+ iSf So)  I  ^ 


S|  Cq  +  c ,  5o 

o 

—  C,Co 

S,s.  -f  c,(|-  Co) 
o 

3,(I-C,)  -  C.So 


C,=  COS^j  ,  3,“S(nYj  ,  Co=.COSlOot  ,  5e  =  Sir|tJot. 

where  j  =  1,2  refers  to  the  first  and  second  sen.sor. 

Recoursive  form  of  Weighted  Least -Squares  Estimations 
Choose  X  to  minimize 

S/"  [(yA-C*)  +  (^4-cJx)] 

where  1.  Tne  si-incla^d  soluuioa  of  linear  reqies;oon  i; 

X  =  An 

+  Ch,cJ) 

*n»| 


(8.17) 


(8.21  ) 


•  •: 


-:i 


V- 

..  *•  *  .  .  ti 

•-  .«.< 


In  order  to  deduce  the  sequential  solution,  tiotf'  'hat 


which  permits  the  re-arrangemen.t  . 

Xn  =  A’J  A,.,Xh-. 

or  ^  (y«b„  +  2„C„)  +  Ah  (Ah  -  bnL  -  ChCh  )xh., 

Xh  =  X,.,  +  Ah  [bn  (yH-t^Xn.,)  +  Ch  U.-cJx„..)]  fS.25) 

In  order  to  generate  the  inverse  also  by  a  sequential  process  we  make  u.se  of  the  matrix 
identity . 

[l  +  PHR*‘H"j”p  =  P-PH[h"PH  +  r]Vp  (8.26) 

Put  H®  be  and  R^I  &  rearrange  as 

[^P''+HHT'=  P/:^  ->PH[h’'PHv<'IJ’'h''P 

Thus  if  P  '*  An-i 

Ah  =  [^Ah-i 

or  Bh=>&h-. ->  Bh.,Hh[h"Bh-.Hh:^iJ"hjBh-. 

Transformation  to  Square  Root  Form 


Let 


where  e  is  given  by  (3.20)  and  o<_by  (3.22) 


Form 


s  s 


5h+i  "  5h  ^  "* 

(3.20)  and  o<^by  (; 

_  _l_s  _ 2, 

^H  ^  0<„ 

S„c»  Ch^Bh  eJS 


«  *>^0 


(8.28) 


but  is  scalar,  hence 

5h*i  ^h*i  ~  ^  Sh  Sri  B"B>»)Sh*>iBh5„  (8.29) 

ajbsfltute  (3.22)  into  (8.29)  to  yield 

Sh,,  Sh*"^  =^’'Sh  sj  :x“"(/‘  +  's„eHeJ 5j  H.r ) 

Now  ajbstitute  (3.18)  and  (3.20)  into  (8.30),  hence 

Bh=^’'6h.,  ^  b^'^Bn.l  ' 

Given  this  ha.s  been  <leriverj  for  only  one  meas.irf^mf?nt ,  the  Ir  j  !  tor*r;',  •  : 
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ABSTRACT 

'^'^'The  paper  presents  an  approach  to  on-board  commanding,  estimation,  and  control  of  the  attitude  motion 
of  manoeuvring  spacecraft,  based  on  modern  control  principles. 

Firstly  the  control  algorithms  are  discussed.  The  control  law  is  based  on  explicit  model  following. 

It  comprises  single-axis  models  of  the  spacecraft  motion,  which  generate  a  target  trajectory  and  associ¬ 
ated  target  control.  The  spacecraft  tracks  the  target  trajectory  by  means  of  the  target  control  which  is 
fed  forward  to  the  spacecraft,  and  by  means  of  state  feedback  control.  A  spacecraft  state  estimator  pro¬ 
vides  for  the  estimates  of  the  spacecraft  state  (attitude,  angular  velocity),  and  provides  for  the  esti¬ 
mate  of  the  disturbance  torque  which  is  used  for  disturbance  torque  compensation. 

Secondly  an  algorithm  for  inertial-optical  attitude  determination  and  estimation  of  gyro  parameters 
(di'i^t  rate  bias  and  scale  factor  error)  is  presented. 

The  algorithms  were  validated  in  software  simulations  of  an  attitude  control  system  of  the  type  as 
used  in  the  Infra  Red  Astronomical  Satellite  (IRAS).  The  control  law  and  state  estimator  were  tested  in¬ 
flight,  in  an  on-board  experiment  with  the  IRAS  spacecraft. 

The  considered  control  system  comprises  a  strapdown  rate-integrating  gyro  and  a  slit-type  star  sen¬ 
sor  for  optical-inertial  attitude  sensing,  a  reaction  wheel  actuator,  and  a  16-bit  on-board  computer. 

The  estimation  and  control  algorithms  are  described,  design  trade-offs  are  discussed,  simulation  re¬ 
sults  and  in-flight  results  are  presented. 

1.  INTRODUCTION 

Several  years  ago  the  National  Aerospace  Laboratory  NLR  initiated  a  research  programme  on  modern  es¬ 
timation  and  control  techniques  in  spacecraft  applications.  Refs.  1,  2,  3.  The  present  paper  describes  al¬ 
gorithms  for  on-board  cotmianding,  estimation  and  control  of  the  attitude  of  manoeuvring  spacecraft  using 
an  on-board  computer.  Their  performance  is  demonstrated  in  a  case  study  of,  and  in-flight  experiments 
with  the  Infra  Red  Astronomical  Satellite  (IRAS  ,  Ref.  4). 

The  following  items  are  discussed: 

-  on-board  commanding  of  the  spacecraft  attitude  motion, 

-  a  model  following  control  technique  for  attitude  manoeuvring, 

-  an  estimator  for  state  feedback  and  disturbance  torque  compensation, 

-  a  Kalman  filter  for  inertial-optical  attitude  determination  and  estimation  of  gyro  parameters. 

The  algorithms  have  been  tested  in  software  simulationsof  a  fine  control  system  of  the  type  as  used 
in  IRAS.  The  algorithms  are  currently  being  implemented  on-board  IRAS,  and  tested  in  flight.  Some  initial 
in-flight  results  are  presented. 


2.  THE  ATTITUDE  CONTROL  PROBLEM 

The  attitude  control  problem  is  depicted  in  figures  1,  2,  3.  The  satellite  attitude  with  respect 
to  the  geocentric  reference  frame,  figure  1,  is  defined  by  the  angle  about  the  sunvector  OZ,  the  offset 
angle  u  about  the  y-axis,  and  the  yaw  angle  >  about  the  x-axis.  The  payload  boresight  is  along  the  +  x- 
axis.  The  commanded  spacecraft  attitude  is  defined  by  two  angles  lic^,  where  =  0  (the  suffix  c  denotes 

commandeo),  wnich  suffices  for  the  payload  to  be  able  to  cover  the  celestial  sphere. 

The  spacecraft  is  to  perform  accurate  and  very  stable  scans  and  pointings  about  the  sunvector  for  ob¬ 
servation  purposes.  The  commanded  spacecraft  motion  consists  of  series  of  tracks  of  constant 
angular  velocity  and  constant  offset  angle  (v^  =  0).  By  concatenation  of  different  tracks,  defined 

by  1+j.i  arbitrary  observation  patterns  can  be  prescribed,  such  as  scans,  rasterscans,  stripscans, 

pointings,  etc. .figure  2-  The  manoeuvres  (slews)  between  the  tracks,  during  which  no  observations  can 
take  place,  must  be  perfornied  in  minimum  time,  figure  3. 

The  spacecraft  is  equipped  with  reaction  wheels  (RWLX,  RWLY,  RWLZ)  along  the  x- ,  y- ,  and  z-axis.  The 
angles  .i  ano  i  are  measured  by  a  two-axis  fine  solar  sensor  (FSSY,  FSSX).  For  determination  and  control 
of  *  a  attitude  about  the  sunvector  a  sampled,  rate-integrating  gyro  (GYRZ)  is  used,  whose  input  axis  is 
aligned  with  the  z-axis.  A  slittype  star  sensor  (SSE),  whose  line  of  sight  is  aligned  along  the  +  x-axis, 
provides  intermittently  -  e.g.  3  to  12  times  per  orbit  -  additional  measurements  of  the  attitude  about  the 
sunvector.  A  16-bit  wordlength  on-board  computer  (OBC)  is  available  for  data  processing.  The  sample  fre¬ 
quency  of  the  control  system  is  2  Hz. 


3.  CONTROL  SYSTEM  DESIGN  APPROACH 

The  equations  of  three-axial  rotational  motion  of  the  spacecraft  are  coupled,  nonlinear  differential 
equations.  The  aim  is  to  simplify  control  system  design  to  the  design  of  three  single-axis  systems,  viz., 
the  x-axis  system  (FSSX,  RWLX)  for  control  of  ('i,T),  the  y-axis  system  (FSSY,  RWLY)  for  control  of  (v,'.), 
and  the  z-axis  system  (GYRZ, RWLZ)  for  control  of  ('k,T).  It  is  found  from  analysis  of  the  three-axial  mo- 


1 1-: 


tion,  see  Appendix  A,  that  the  motion  (v,v)  can  be  decoupled  from  the  other  axes,  where  cross-coupling 
torques  and  kinematic  coupling  effects  are  small  and  can  be  considered  as  disturbances.  However,  it  ap¬ 
pears  that  control  of  ttie  motion  (i,u)  is  strongly  coupled  with  the  control  of  the  motion  This  is 

plausible, because  control  of  the  motion  about  the  sunvector  must  involve  simultaneous  control  commands  to 
z-axis  and  x-axis  in  order  to  maintain  a  =  0.  To  this  end  the  control  law  for  the  motion  (';,v)  about  the 
sunvector  is  made  to  generate  a  control  u,  (acceleration  about  the  sunvector),  which  is  distributed  in  the 

V 

proper  ratio  over  the  z-axis  and  the  x-axis.  Likewise,  a  kinematic  coupling  'iO/cosv,  which  is  a  major  dis¬ 
turbance  for  the  motion  (a,a)  during  simultaneous  slews,  is  compensated  by  an  additional  feedforward  con¬ 
trol  to  the  x-axis.  The  feedforward  control  conmands  effectively  decouple  the  equations  of  motion,  and 
hence  control  algorithm  design  for  (u,v),and  for  (a,.i)  and  (v,i)  can  further  proceed  separately. 

In  the  next  sections  we  limit  ourselves  to  the  discussion  of  the  algorithms  for  command,  estimation 
and  control  of  the  motion  (^,*)  about  the  sunvector,  on  basis  of  the  blockdiagram,  figure  4. 


4.  SPACECRAFT  MOTION  COMMANDING 


Figure  3  shows  a  generalized  trajectory  of  the  desired  spacecraft  motion  (v^(t),  around  the 

sunvector  over  some  observation  period,  e.g.  several  hours.  It  consists  of  tracks  i  of  constant  angular  ve¬ 
locity  beginning  at  initial  attitude  q  ,  at  time  t^  ■. 

For  the  purpose  of  commanding  the  spacecraft  motion,  a  table,  called  Satellite  Operations  Plan  (SOP), 
is  loaded  by  ground  command  into  the  on-board  computer.  The  SOP  contains  sets  {t  .,  •,  ii  ■}  giving 

the  initial  conditions  and  the  desired  angular  velocity  for  each  track.  The  commanded  spacecraft  state  is 
defined  by:  x  ,  =  (4r,ik,.)^(t,  ) ,  i.e.  the  desired  spacecraft  attitude  and  angular  velocity  at  the  control 
system  sample  points  tj^. 

A  "setpoint  generation"  program  in  the  on-board  computer  calculates  the  commanded  state  by  linear  extrapo¬ 


lation, according  to 


^c,k+l  "  *  ^c,k 


(1) 


where 


A  t 
1 


At=  sampling  period  of  control  system 


Algorithm  (1)  is  properly  initialized  at  each  t.  ,,  with  the  initial  state  x  .. 

C  >  1  C  » 1 

The  commanded  state  x^  ^  constitutes  the  setpoint  for  the  model  following  control  law. 


5.  MODEL  FOLLOWING  CONTROL  LAW 


The  following  sta 
commanded  state 
target  state 
spacecraft  state 
target  state  error 
spacecraft  state  error 

model  following  error 


tes  and  state  errors  are  considered  (Fig.  4); 

''c,k  "  ('^c,k’  'I'c.k^^ 

^T,k  "  ^'‘'T.k’  '^T,k^^ 

Xr  =  (\  ’  '^k 

^T,k  "  K,k’  "  (’'T,k  ■  '‘c,k^ 


The  control  law  has  to  generate  controls,  such  that  the  soacecraft  state  "zeroes  in"  on  each  newly 
coniinanded  track  in  minimum  time,  and  such  that  in  steady-state  the  spacecraft  state  closely  follows 
the  commanded  track.  This  is  performed  by  an  explicit  model  following  control  technique. 

The  control  law  consists  -  in  essence  -  of: 

-  a  target  trajectory  generator.  The  target  trajectory  generator  algorithm  comprises  a  single-axis  model  of 
the  spacecraft  motion  about  the  sunvector,  controlled  by  a  time-optimal  control  algorithm.  At  each  "jump" 
in  the  commanded  trajectory  it  generates  a  transition  trajectory  or  target  trajectory  x.j.  which  "zeroes-in" 

on  the  commanded  track  x^ ,  figure  3.  The  associated  target  control  Uj  is  fed  forward  to  the  space¬ 
craft.  After  the  transition  the  generated  target  trajectory  becomes  exactly  equal  to  the  commanded  track 
and  the  target  control  vanishes  until  the  next  transition.  Because  the  spacecraft  model  is  noise-free, 
and  not  subject  to  disturbances, truly  time-optimal  (single-axis)  transitions  are  generated  in  this  way. 

If  the  spacecraft  state  closely  tracks  the  target  state,  the  spacecraft  state  will  also  "zero-in"  in 
minimum  time, and  closely  follow  the  commanded  state  in  steady-state. 

-  a  state  feedback  regulator.  Due  to  feedforward  of  the  target  control  the  spacecraft  tends  to  follow  the 
target  trajectory.  However,  state  feedback  is  applied  to  ensure  that  the  spacecraft  state  closely  tracks 
the  target  state.  Estimates  of  the  attitude  and  angular  velocity  about  the  sunvector  are  produced  by  the 
spacecraft  state  estimator  (part  of  the  estimation  algorithms,  sect.  6).  It  also  produces  an  estimate  of 
the  disturbance  acceleration,  which  is  used  to  compensate  the  disturbance  torque. 


A  heuristic  derivation  of  the  discrete  state  equation  and  the  components  of  the  control  law  is  given  in  the 
next  paragraphs.  Numerical  values  of  control  law  parameters  are  summarized  in  table  2. 

Spacecraft  state  equation.  The  control  system  is  a  sampled  data  system,  with  fixed  sample  rate.  In  Ap¬ 
pend!  xiTTHe'TorrtTmlous^TTmFTtate  equation  for  the  motion  (ji(t),  ij(t))  aroutid  the  sunvector  is  derived, 

Eq.  A(13),  which  after  integration  over  the  sample  interval  yields  the  discrete  spacecraft  state  equation 


'k+1 


=  A  x,  +  b  u 


ip.k 


+  b  m 


4,,k 


(2) 


where 


Xk  =  (li'.  (t.  )  ;  u  =  the  control  command  (acceleration)  around  the  sunvector, 

composed  of  the  target  control  u^,  the  disturbance  com- 

^  ^  .  pensation  Up,  and  the  feedback  control  u^. 

0  1  m  =  the  disturbance  acceleration  around  the  sunvector. 

b  =  (At‘^/2,  at)^  ;  At  =  the  sampling  interval  of  the  control  system. 

Target  trajectory  generator.  The  spacecraft  model  used  in  the  design  of  the  target  trajectory  generator 
is  the  detenninistic  part  of  the  spacecraft  state  equation  (2),  which  is  denoted  by 

'^T.k+l  "  ^  ^T.k  ^  ‘'T.k 
where  j 

Xj  =  (*j,  li-]-)  is  the  target  state. 

The  target  control  of  the  discrete  system  Eq.  (3)  is  generated  by  a  modification  of  the  well-known  time- 
optimal  bang-bang  control  law  of  a  double  integrator  system  (Ref.  5). 

The  modified,  discrete  minimum-time  control  algorithm  is  basically  of  the  bang-bang  type.  Fig.  5. 

u,  ,  =  -  u,  sign(2a.,  u,  i,  +  ^  vl'W  phase-plane 

I  ,K  I  Ip, ,2^  I  ,K  I  ,K  I  ,K 

u,  .  =  -  20,  u,  sign(<p,  ,  ),  along  the  switch-curve 

I  ,K  I  I  ,K 

where 

u,  is  the  maximum  attainable  control  effort, 

' max  .  j  . 

O.J.  IS  a  design  parameter, 

=  l-j  -  *(.  ,  is  the  target  attitude  error, 
cjjj.  =  ,  is  the  target  velocity  error. 

The  acceleration  level  during  the  initial  phase  of  the  transition  is  u,  ,  and  during  the  terminal  phase 

max 

(along  the  switch-curve)  o-u,  ,  where  o,  =  0.7  to  0.8  in  order  to  provide  a  torque  margin  for  feedback  reg- 

max 

ulation  and  disturbance  torque  compensation.  The  other  modifications  account  for  possible  constraints  on 
the  allowable  spacecraft  inertial  angular  velocity  ,  and  for  the  finite  sampling  of  the  system;  the  former 

by  setting  u.|.  =  0  (coasting)  when  the  relative  velocity  limits  Q*  and  Q~  are  reached,  the  latter  by  adjust¬ 
ing  the  control  torque  Uj  upon  reaching  the  switch-curve. 

A  linear  dead-beat  algorithm  is  used  near  the  origin  of  the  phase-plane,  as  the  discrete  bang-bang  algo¬ 
rithm  (4)  will  cause  overshoot  and  repetitive  switching.  The  deadbeat  control  algorithm  is 

^,k  "  “^db  ^T,k  (5) 

where  is  the  deadbeat  gain  vector.  Deadbeat  control  is  used  in  the  region  where  (0,0)  can  be  reached  in 
two  sample  intervals,  while 

I'^db  ^T,kl  <  “t  “t  ■ 

mdx 

The  target  control  Uj  thus  generated  is  fed  forward  to  the  spacecraft. 

Disturbance  torque  compensation.  Given  that  the  target  control  is  fed  forward  to  the  spacecraft,  from 
Eq.  (2)  and  Eq.  (3)  it  appears  that  the  disturbance  torque  causes  the  spacecraft  state  to  deviate  from  the 
target  state. 

The  spacecraft  state  estimator  produces  an  estimate  ifi  of  the  disturbance.  The  disturbance  torque  effect  on 
the  spacecraft  state  is  counteracted  by  an  additional  control  command: 

‘^D,k  =  -  ^,k 

State  feedback  regulator.  The  aforementioned  control  components  u^  and  Up  are  of  the-open-loop  feed¬ 
forward  type.  In  order  to  ensure  that  the  spacecraft  indeed  closely  tracks  the  target  trajectory  (follows 
the  model),  the  control  loop  is  closed  by  a  feedback  regulator,  producing  a  control  command  u^^.  From  Eqs. 

(2),  (3),  and  (7)  one  finds  that  the  model  following  error  evolves  according  to 
S.k+1  "  *  S.k  ^  ''m,k  ^  ^  “R,k’ 


m,  -  ffi, 

ifi  ij, 


represents  the  effects  of  disturbance  acceleration  estimation  errors. 


Feedback  control  is  suitable  to  stabilize  e,,  and  thence  x  x,,  as  required. 

I 

The  optimal  gains  of  the  state  feedback  regulator  are  calculated  by  optimization  of  the  quadratic  integral 
performance  criterion 

J  =  7  (t)  R  c^(t)  dt  .  (9) 


The  weighting  matrix,  R  is  taken 


where  r^,  r2  are  the  weights  on  the  attitude  error  and  the  velocity  error  respectively.  Only  the  ratio 

r^/rg  is  important, as  J  can  be  scaled  by  this  factor.  So  the  relative  weight  tie  used  as  a  design 

parameter  in  establishing  the  regulator  gains.  Standard  software  packages  are  available  for  discretization 
of  the  performance  index,  and  calculation  of  the  optimal  gains  (Ref.  6). 

The  feedback  regulator  normally  operates  under  steady-state  conditions,  that  is,  the  model  following  error 
is  small  and  hence  the  required  control  effort  will  not  exceed  the  attainable  maximum.  However,  situations 
can  arise  where  larger  model  following  errors  occur,  which  saturate  the  control,  i.e.  the  requested  control 
exceeds  the  maximum  control  available.  In  general  the  considered  control  system  with  linear  state  feedback 
exhibits  very  badly  damped  transients  when  saturation  of  the  control  occurs.  Therefore  the  feedback  regula¬ 
tor  is  extended  to  dual  mode  operation  (Refs.  7,  8).  The  final  form  of  the  feedback  regulator  is 

‘^R,k  "  '  (''l‘'i..l,k  '^2^p2,k  ^  '^l‘':;.2,kl^ti,2,kl/^‘'T‘^T  I^R.k^^^T 


where  c  are  the  attitude  and  the  angular  velocity  model  following  errors  respectively,  k-.k^  are  the 


linear  feedoack  gains,  and  a.j.u.j- 


was  defined  previuously. 


For  large  errors  Eq.  (11)  generates  a  bang-bang  like,  nearly  time-optimal  control.  The  function  is 
rather  steep  (depending  on  k^)  around  the  "switch-curve"  +  e  2I<'.„21/2i<yUj  =  0,  and  the  clipping  of  the 

*'  ^  max 

control,  [uj,  ul  <  “J-r  '  resembles  the  sign  function  (compare  the  time-optimal  control  law  for  the  target 
’  max 

model).  So  for  large  errors  (e^j^  ^’'^^,2  k^  towards  the  "switch-curve",  and  will  move  "bang-banging" 

around  the  "switch-curve"  towards  (0.0).  Hence  large  errors  are  reduced  in  a  nearly  time-optimal  manner. 

For  small  errors  the  quadratic  velocity  term  is  small  compared  to  the  linear  velocity  term,  and  the  re¬ 
sulting  control  resembles  linear  state  feedback. 

Total  control  conunand.  The  total  control  command  is  given  by 
%  =  ^T  ^  '^0  +  '^R 

It  is  noted  that  u^  is  the  control  acceleration  for  the  motion  around  the  sunvector,  which  must  be  properly 
distributed  over  x-axis  and  z-axis.  Hence  the  control  command  to  the  z-axis  is 

Vz  =  %  -  (13) 

and  the  feedforward  control  command  to  the  x-axis  is 

"f*x  =  -  %  (1^) 

6.  ESTIMATION  ALGORITHMS 

The  attitude  around  the  sunvector  is  measured  by  means  of  the  z-axis  gyro  and  the  star  sensor.  A  block- 
diagram  of  the  sensor  data  processing  is  given  in  the  part  of  figure  4  denoted  "Estimation  Algorithms" 

The  attitude  around  the  sunvector  is  measured  through  correction  and  summation  of  the  z-gyro  output  sam¬ 
ples  at  the  sample  points  t|^,  taking  into  account  the  offset  angle  V|^. 

The  attitude  measurements  from  the  gyro  are  processed  further  in  one  part  of  the  estimation  algorithms, 
called  spacecraft  state  estimator,  yielding  estimates  of  the  spacecraft  state  (attitude  and  angular  velo¬ 
city)  and  the  disturbance  acceleration. 

The  star  sensor  attitude  measurements  are  performed  intermittently,  e.g.  3-12  times  per  orbit.  These  meas¬ 
urements  are  processed  in  the  other  part  of  the  estimation  algorithms  called  gyro  parameter  estimator,  yield¬ 
ing  estimates  of  the  spacecraft  attitude  and  gyro  drift  rate  bias  and  scale  factor  error.  The  estimates  of 
drift  rate  bias  and  scale  factor  error  are  used  for  correction  of  the  gyro  output.  The  attitude  estimate  is 
used  for  updating  of  the  gyro  attitude  reference,  and  the  spacecraft  state  estimator. 

6.1.  Measurement  of  the  attitude  around  the  sunvector 


The  gyro  produces  pulses  representing  angular  increments  about  the  spacecraft  z-axis  of  nominally 

1  arcsecond.  The  pulses  are  counted  in  a  up-down  counter,  which  is  sampled  and  reset  at  a  fixed  rate  (here 

2  Hz). 

Each  gyro  output  sample  AiPg  (gyro  output  increment  over  the  sample  period  t|^_j,  t|^)  is  corrected  for 
scale  factor  error  and  drift  rate  according  to: 

''■‘^gc.k  "  (^  *  "SF>  ''"<’g,k  ^  “b 

where  Aip^^  is  the  corrected  gyro  output  sample,  and  and  w^^  are  the  most  recent  estimates  of  scale 


factor  error  and  drift  rate  bias. 

The  corrected  "measurement"  of  the  attitude  around  the  sun  vector  then  is  given  liy : 


n 


k 

I 

i  =  l+l 


*gC,k  =  n  ^  (1^) 

where  JJj  is  the  most  recent  spacecraft  attitude  estimate  established  by  the  gyro  paraiiieter  estimator. 

6.2.  Spacecraft  state  estimator 

The  control  law  uses  estimates  of  spacecraft  attitude,  angular  velocity,  and  disturbance  acceleration , 
at  the  instants  t|^.  The  estimates  are  obtained  by  the  spacecraft  state  estimator. 

Measurement  equation.  The  spacecraft  state  estimator  uses  the  integrated  gyro  output  (Eq.  16)  as  its 
measurement.  It  is  assumed  that  measurement  errors  -  mainly  quantization  noise  and  high  frequency  noise  - 
are  white.  Thus,  the  measurements  can  be  modelled  by 
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where  v  ,  is  the  measurement  noise,  with 

Vq(.)~N(0,  oj). 

System  equation.  For  the  design  of  the  spacecraft  state  estimator  the  state  vector  from  Eq.  (2)  is 
augmented  by  the  disturbance  acceleration  to  be  estimated.  The  total  disturbance  is  considered  to  be  com¬ 
posed  of  random  noise,  which  is  modelled  as  a  Gaussian  white  sequence  w^.^,  and  a  slowly  varying  accelera¬ 
tion,  which  is  modelled  as  a  random  walk  process  m  with  forcing  function  w  . 

^  m 

The  resulting  system  equation  is  given  by 
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The  system  noise  vector  w^  is  a  white  sequence,  with 
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Estimator  equations.  The  estimator  equations  follow  from  the  Kalman  filter  theory 
-  prediction  equation 


A,  X 


-  update  equation 


+  1. 

1  i  +  0  u  ,  , 
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(19) 
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where  the  superscripts  ",  -,  and  +  denote  estimates  before,  respectively  after  the  measurement  update, 


and 


K^  is  the  estimator  gain  vector. 


Since  the  system  is  time-invariant,  the  estimator  gains  will  settle  on  a  steady-state  value.  The  im¬ 
plemented  estimator  uses  these  precalculated,  steady-state  gains.  Standard  software  packages  are  available 
for  calculation  of  estimator  gains  (Ref.  6). 

2 

The  quantity  is  a  useful  design  parameter  for  trading-off  steady-state  filtering  performance  versus  fast 

transient  response  to  sudden  disturbance  torque  changes.  Disturbance  torques  change  rapidly  during  manoeu¬ 
vres,  whereas  during  steady-state  tracking  they  only  vary  slowly.  During  steady-state  high  filtering  ac¬ 
curacy  is  required  -  to  obtain  high  control  accuracy  -  resulting  in  a  slow  transient  response  of  the  filter. 
During  manoeuvres  fast  response  of  the  filter  to  disturbance  torque  variations  is  required,  as  a  slow  re¬ 
sponse  causes  considerable  transient  attitude  and  velocity  errors.  In  our  case  no  acceptable  compromise  be¬ 
tween  steady-state  accuracy  and  transient  response  speed  could  be  found.  Therefore  it  was  decided  to  use 
two  sets  of  gains  and  a  gain  switching  mechanism.  One  set  is  used  during  steady-state,  whereas  the  other 
set  is  optimized  for  fast  transient  response.  Detection  of  sudden  disturbance  torque  changes  and  switch¬ 
over  to  the  other  gains-set  is  performed  by  monitoring  the  measurement  residual 
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and  comparing  it  with  a  threshold  value.  The  switch-over  criterion  is  given  by; 

|rk|  s  r^^  ^  -►  switch-over  to  "fast  response”  gains 
[rkl  '"f  p  "•  switch-back  to  "steady-state"  gains 

where  Ir,  I  is  the  absolute  value  of  the  current  measurement  residual.  The  threshold  values  r  ..  and  r, 

'  k'  st.s  f.r 

are  chosen  approximately  equal  to  the  (experimentally  established)  So  values  of  the  measurement  residual 

of  the  "steady  state"  estimator,  respectively  the  "fast  response"  estimator. 

The  numerical  values  of  system  and  measurement  noise  and  the  resulting  gains  are  summarized  in  Table  2. 

Remarks . 

-  The  use  of  the  disturbance  model  in  the  estimator  improves  the  accuracy  of  attitude  and  angular  velocity 
estimates  (cf.  Ref.  13).  Moreover,  use  of  the  disturbance  estimate  in  the  control  law  quickens  the  space¬ 
craft  response,  and  prevents  steady-state  attitude  errors. 

-  The  gyro  measurement  noise  represents  quantization  effects  and  high-frequency  gyro  noise,  which  are  as¬ 
sumed  to  be  white.  Strictly  speaking  there  will  also  be  other  residual  gyro  errors,  e.g.  due  to  the  lim¬ 
ited  accuracy  of  e^p  and  and  residual  drift.  These  residual  errors,  which  may  not  be  white, 

are  not  observable  and  thus  cannot  be  filtered  out.  This  implies  that  the  estimates  li!|^  and  will  be 
corrupted  by  residual  gyro  errors.  The  effects  on  ,  being  a  low  residual  drift  rate,  are  negligible 
The  accumulated  effects  in  require  that  is  also  updated  by  the  absolute  attitude  estimate  f'j , 
through  the  gyro  parameter  estimator  (Fig.  4). 

-  If  the  spacecraft  state  estimator  and  the  gyro  attitude  reference  are  updated, the  attitude  control  system 
may  produce  a  jerk  which  may  be  unacceptable  from  the  payload  point  of  view.  In  these  cases  the  attitude 
update  may  be  delayed  till  a  more  suitable  time. 


6.3.  Gyro  parameter  estimator 

The  gyro  parameter  estimator  is  based  on  the  system-,  and  measurement  equations  of  gyroscope  and  star  sen¬ 
sor.  The  mathematical  models  of  these  sensors  and  the  associated  system-  and  measurement  equations  are  de¬ 
scribed  in  Appendix  B. 

The  resulting  gyro  parameter  estimator  is  of  the  minimum-variance  Kalman-filter  type.  For  the  case  consid¬ 
ered  in  this  study  it  has  been  assumed  that  3  to  12  stars,  but  on  the  average  6  stars,  can  be  observed  per 
orbit.  This  implies  that  the  filter  will  be  able  to  estimate  only  the  constant  or  nearly  constant  part  of 
the  gyro  drift  rate,  i.e.  the  drift  rate  bias  W|j(t),  and  scale  factor  error  0jp(t).  Generally  accepted  mod¬ 
els  for  these  parameters  are  random  walk  processes  to  account  for  the  long-term  variations  of  the  drift 
rate  bias  and  scale  factor  error  (Ref.  9). 

The  system  matrix  and  system  covariance  matrix  of  the  gyro  parameter  estimator  are  functions  of  the  space¬ 
craft  angular  velocity  history  and  the  time-interval  between  successive  star  measurements.  Therefore  the 
estimator  gains  in  general  will  not  settle  on  a  steady-state  value.  This  implies  that  the  system  matrix, 
the  noise  covariance  matrix,  and  the  filter  gains  have  to  be  calculated  on-board. 

It  is  noted  that  Ejp(t)  and  W[j(t)  are  not  observable  separately  if  the  average  spacecraft  angular  velocity 

between  three  consecutive  star  measurements  is  constant.  Thus,  manoeuvres  are  required  to  obtain  estimates 
of  cjp  and  Wjj  separately.  During  periods  of  constant  angular  velocity  (scan)  only  the  drift  rate  bias  is 

estimated,  whereas  the  scale  factor  error  is  treated  as  a  consider  parameter  (since  the  scale  factor  error 
varies  slowly,  one  may  take  its  uncertainty  into  account,  but  abstain  from  updating,  (Ref.  10).  Thus,  scale 
factor  error  variations  are  estimated  and  corrected  for  via  the  drift  rate  bias  estimate. 

In  view  of  the  finite  computer  wordlength  (16  bits)  special  attention  had  to  be  paid  to  numerical  stability. 
The  U-D  factorization  algorithm  was  chosen  as  the  computationally  most  favourable,  numerically  stable  algo¬ 
rithm  (Ref.  11).  Algorithmic  details  may  be  found  in  reference  12. 


7.  SOFTWARE  SIMULATIONS 

The  performance  of  the  estimation  and  control  algorithms  has  been  investigated  through  software  simu¬ 
lations  of  an  attitude  control  loop  of  a  spacecraft  of  the  IRAS  type. 

Commanded  attitude  motions  are  pointing,  scanning,  and  fast  reorientation  about  the  sun  vector. 


7.1.  Truth-Models 

For  simulation  purposes,  models  of  the  involved  hardware  components  ("truth-models")  have  been  devel¬ 
oped. 

The  reaction  wheel  simulation  involves  torque  saturation,  friction,  torque  noise,  etc. 

Gyro  drift  and  scale  factor  error  simulation  are  based  on  discretized  versions  of  the  models  given  in 
figure  6. 

Truth-model  parameters  are  summarized  in  table  1.  Parameter  values  are  based  on  manufacturers  specifica¬ 
tions,  and  in-house  measurements  (Ref.  14  and  15). 


7.2.  Simulation  Results 

Performance  of  the  gyro  parameter  estimator.  The  gyro  parameter  estimator  performance  is  judged 
through  the  residual  gyro  attitude  measurement  error,  i.e.  after  applying  the  corrections  for  w^,  and 


■*.  New  estimates  (if  observable),  and  are  implemented  inmediately  after  each  star  measurement. 
Results  are  shown  in  figures  7a-b. 

Figure  7a  shows  the  performance  during  a  calibration  run  in  which  the  spacecraft  is  manoeuvring  with  both 
positive  and  negative  angular  velocity;  both  drift  rate  bias  and  scale  factor  error  are  estimated.  The  mean 
time  between  star  measurements  is  1000  sec. 

Figure  7b  shows  the  performance  during  a  6  orbit,  constant  angular  velocity  scan.  Six  stars  are  seen  per 
orbit,  the  mean  time  between  star  measurements  being  1000  sec.  Because  of  the  constant  angular  velocity, 
drift  rate  bias  and  scale  factor  error  are  not  observable  separately;  the  scale  factor  error  effects  are 
estimated  and  corrected  for  indirectly  through  the  drift  rate  estimate. 

Spacecraft  state  estimator  performance.  The  spacecraft  state  estimator  performance  was  studied  in  a 
number  of  runs,  trading  off  steady-state  filtering  accuracy  versus  short  response  time  to  disturbance  tor¬ 
que  changes. 

An  example  of  the  disturbance  torque  estimation  response  is  given  in  figures  8a-b.  It  will  be  clear  that 
the  transient  (torque)  estimation  errors  will  cause  transient  attitude  and  velocity  errors.  In  order  to  ob¬ 
tain  adequate  steady-state  filtering  performance,  as  well  as  fast  transient  response,  and  limited  attitude 
and  velocity  error  transients,  the  estimator  was  implemented  with  two  sets  of  gains  (section  6.2). 

The  resulting  disturbance  torque  estimation  response,  and  attitude  and  velocity  error  transients  are  shown 
in  figures  8b-d.  It  may  be  concluded  that  the  estimator  performance  is  satisfactory.  The  attitude  error 
transient  caused  by  the  disturbance  torque  step  change  does  not  exceed  5  arcsec,  thanks  to  the  fast  esti¬ 
mator  response. 

Control  law  performance.  Control  law  performance  can  be  judged  from  reorientation  (slew)  performance 
and  from  steady-state  tracking  performance. 

-  Reorientation  performance  is  mainly  determined  by  the  target  trajectory  generator. 

-  Tracking  performance  is  determined  by  the  disturbance  torque  compensation  and  steady-state  feedback  regu¬ 
lation. 

The  "overall"  tracking  performance  appears  from  figures  8c-d.  The  short  term  I0  values  of  the  attitude 
c.q.  velocity  error  are  0.36  arcsec  and  0.38  arcsec/sec  respectively.  Reorientation  (slew)  performance  is 
shown  in  figures  9a-b.  Reorientation  manoeuvres  are  time-optimal  within  the  given  constraints  of  the  tar¬ 
get  trajectory  generator.  This  may  be  concluded  from  figure  9a,  which  shows  the  spacecraft  attitude  error 
(=  actual  attitude  -  commanded  attitude)  during  a  slew.  The  jump  in  the  commanded  attitude  causes  a  jump  in 
the  attitude  error,  which  is  reduced  in  minimum  time.  It  is  noted  that  there  is  no  transient  at  the  end  of 
the  slew.  The  slew-time  equals  the  theoretical  minimum  slew-time  of  the  target  generator.  It  may 

be  concluded  that  the  spacecraft  closely  tracks  the  target  trajectory  and  that  reorientation  of  the  actual 
spacecraft  takes  place  in  minimum  time. 


8.  IN-FLIGHT  RESULTS 

The  control  law  and  spacecraft  state  estimator  have  been  tested  in  flight.  To  this  end  the  algorithms 
have  been  loaded  from  the  ground  in  the  on-board  computer  of  IRAS,  where  they  have  temporarily  taken  over 
fine  control  around  the  sunvector  from  the  existing  PID/dual  mode  control  law.  Some  results  are  shown  in 
figures  10a,  b,  c.  The  commanded  motion  is  a  rasterscan,  comprising  two  tracks,  at  positive  c.q.  negative 
angular  velocity  =  1.925  arcmin/sec,  of  60  seconds  duration  each,  separated  by  a  small  slew  for  angular 

velocity  reversal.  A  transition  time  of  10  seconds  between  the  tracks  is  taken  into  account,  which  corre¬ 
sponds  with  a  jump  in  the  commanded  attitude  of  =  10  x  1925  x  60  =  1155  arcsec.  The  optimal  transition 

time  for  this  jump/angular  velocity  reversal  is  t^  =  8  seconds. 

It  can  be  concluded  from  figures  10a,  b  that  the  model  following  control  performs  well  during  the  transi¬ 
tion.  The  measured  attitude  error  and  velocity  error  (i^g  =  -  0^)  are  within  steady- 

state  specifications  (I't'i^gi  <  5  arcsec,  «  5  arcsec/sec)  within  9  seconds. 

However,  a  slight  overshoot  (»  4.5  arcsec)  and  a  transient  behaviour  are  observed  in  the  attitude  error  at 
the  end  of  the  slew.  Although  within  steady-state  specifications,  it  is  a  flaw  compared  to  the  simulation 
results  (Fig.  9  ). 

The  reason  for  the  overshoot  is  a  mismatch  of  the  moment  of  inertia  of  the  spacecraft  model  -  used  in  the 
target  trajectory  and  state  estimator  -  with  respect  to  the  actual  moment  of  inertia  of  the  spacecraft.  It 
is  noted  that  the  inertia  of  IRAS  has  decreased  since  launch  because  of  expenditure  of  the  coolant  of  the 
telescope.  The  more  oscillatory  behaviour  -  compared  to  the  simulation  results  -  is  due  to  the  processing 
delay  between  the  sampling  instant  and  the  issue  of  the  new  control  command.  The  delay  is  o.07  sec  (fixed) 
the  sampling  interval  is  0.5  sec.  on  board  IRAS.  The  delay  was  not  incorporated  in  the  software  simulation^ 
The  in-flight  behaviour  has  been  confirmed  by  simulations  incorporating  the  delay  and  inertia  mismatch.  The 
in-flight  behaviour  can  be  further  improved  by  reduction  of  the  inertia  mismatch,  which  is  simply  a  matter 
of  adjusting  one  parameter.  The  delay  can  be  compensated  by  a  simple  modification  of  the  target  trajectory 
generator  and  state  estimator,  involving  an  extra  prediction  cycle  over  the  processing  delay.  In  this  way 
the  original  performance  can  be  re-achieved. 

The  steady-state  tracking  performance  is  very  good.  This  is  in  particular  apparent  from  the  quiet  con¬ 
trol  behaviour,  figure  10c,  and  the  velocity  stability,  figure  10b.  There  is  no  steady-state  attitude 
error,  figure  10a. 

Flight  results  from  the  IRAS  spacecraft,  obtained  with  the  conventional,  well  tuned  PID/dual  mode  con¬ 
trol  law  are  shown  in  figures  10d,e,f.  The  commanded  motion  is  a  similar  rasterscan.  The  performance  improve¬ 
ment  due  to  the  new  control  algorithms  appears  from  comparison  of  the  lo  values. 

The  resul ts , figures  10a ,b,d,e, were  obtained  from  unfiltered  gyro  measurements.  The  gyro  output  is 
sampled  every  0.5  sec., and  has  a  quantization  of  1  arcsec.  Hence,  the  lo  values  of  the  measured  attitude 
error  and  velocity  error  are  larger  than  the  lo  values  obtained  from  the  software  simulations,  where  the 
true  attitude  and  velocity  are  known  from  the  simulation. 

Remarks . 

-  Due  to  the  good  steady-state  filtering  performance  of  the  spacecraft  state  estimator  a  low-noise  esti¬ 
mate  of  the  disturbance  acceleration  is  obtained  for  cancellation  of  the  disturbance  torque. 
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-  Manoeuvres  are  performed  mainly  in  feedforward  by  the  target  trajectory  generator  ,  'ntoa  turr-  "ic  .  m  ; 

width  of  the  feedback  loop  can  be  decreased  and  the  damping  can  be  increased  without  re  ir  i  J 

overall  response. 

-  The  application  of  the  state  estimator  and  state  feedback  enables  higner  dar.iping  to  oe  a.iiif'.'i  i  :  :■ 
to  a  conventional  PID  control  law,  where  the  D-term  causes  unwanted  anpl 1 f ication  ut  noie. 


9.  SUMMARY  AND  CONCLUSIONS 

The  paper  presents  algorithms  for  on-board,  sampled  data,  estimation  and  control  of  tne  attitude  r^,- 
tion  of  rigid  spacecraft. 

The  presented  control  law  is  based  on  model  following  control  principles.  It  integrates  the  spacecratr 
reorientation  problem  and  the  steady-state  tracking  problem.  Reorientation  is  performed  mainly  tiy  a  target 
trajectory  generator  which  calculates  a  time-optimal  transition  trajectory  and  associated  target  control. 
Tracking  of  the  target  trajectory  is  performed  by  state  feedback  regulation.  The  feedback  regulator  can  be 
optimized  for  steady-state  tracking  performance,  due  to  feedforward  of  the  target  control  and  estimated 
disturbance  acceleration. 

The  estimation  algorithms  concern  the  filtering  of  inertial-optical  attitude  sensor  data,  and  space¬ 
craft  state  estimation.  The  gyro  parameter  estimator  uses  intermittent  star  sensor  measurements  to  calcu¬ 
late  estimates  of  the  spacecraft  attitude,  the  gyro  drift  rate  bias,  and  (if  observable)  the  scale  factor 
error.  The  estimates  are  used  for  updating  the  attitude  reference,  and  online  correction  of  the  gyro  output 
for  bias  drift  and  scale  factor  error. 

The  spacecraft  state  estimator  produces  estimates  of  spacecraft  attitude,  angular  velocity  and  disturbance- 
torque,  using  the  corrected  gyro  measurements. 

Software  simulations  indicate  satisfactory  performance  of  the  algorithms. 

The  control  law  and  spacecraft  state  estimator  have  been  tested  in  an  in-flight  experiment  on-board 
the  IRAS  spacecraft.  Reorientation  (slew)  performance  is  close  to  time-optimal  and  hence  satisfactory.  How 
ever,  incorporation  of  the  processing  delay  (between  sampling  and  issue  of  the  control  command)  in  the  tar¬ 
get  trajectory  generator  and  spacecraft  state  estimator  and  better  tuning  of  the  spacecraft  model  inertia 
will  further  improve  the  response. 

Steady-state  tracking  performance  is  very  good. 
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APPENDIX  A  ;  DERIVATION  OF  THE  SPACECRAFT  STATE  EQUATION 


Reference  frames.  The  following  orthogonal  right-handed  reference  frames  are  defined,  figure  1: 

-  spacecraft  centered  ,  body- fixed  reference  frame  oxyz. 

-  geocentric  reference  frame  OXYZ. 

The  geocentric  reference  frame  is  treated  as  an  inertial  frame  in  order  not  to  complicate  the  derivations 
unnecessarly . 

Attitude  angles.  The  attitude  of  the  body  fixed  frame  with  respect  to  the  geocentric  frame  is  de- 
scribed  by  the  angles  v.  v,  u.  These  are  obtained  by  three  successive  rotations  of  the  body  fixed  frame, 
from  the  inital  attitude  coinciding  with  the  geocentric  frame  to  the  final  attitude,  in  the  following  order; 
first  a  rotation  v  about  the  initial  z-axis  coinciding  with  the  sunvector,  secondly  a  rotation  ,  about  the 
newly  displaced  y-axis,  thirdly  a  rotation  a  about  the  final  x-axis. 

Commanded  attituae.  The  commanded  motion  of  the  spacecraft  is  about  the  sunvector  and  about  the  y-axis 
only.  Hence  the  commanded  spacecraft  attitude  is  defined  by  two  angles;  the  angle  Vj.  about  the  sunvector. 

and  the  offset  angle  while  =  0. 


Kinematic  relations.  The  relation  between  the  angular  velocities  (p^,  ip  ,  ip^  about  the  spacecraft  body- 
fixed  axes  and  the  rates  of  change  of  the  attitude  angles  is;  ^ 


The  inverse  relation  is; 
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Differentiation  of  Eq.  (A.l) 
leads  to: 


and  elimination  of  (p  ,  (p  ,  (p  by  substitution  of  Eq.  (A. 2)  in  the  result 
X  y  z 
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Spacecraft  dynamics.  The  angular  acceleration  around  the  body  axes  <p„,  Ep..,  ip,,  are  obtained  from  the 

X  y  z 

spacecraft  dynamics,  i.e.  the  Euler  equation. 

The  spacecraft  is  a  rigid  body,  equipped  with  x-,  y-,  and  z-axis  reaction  wheels,  whose  spin  axes  are 
aligned  parallel  to  the  body-fixed  axes.  It  is  assumed  that  the  body-fixed  axes  coincide  with  the  space¬ 
craft  principle  body  axes.  The  moments  of  inertia  of  the  reaction  wheels  are  assumed  to  be  small  compared 
to  the  moments  of  inertia  of  the  spacecraft.  Then  the  equations  of  motion  can  be  linearized,  yielding 

q>„  =  u  +  m' 

X  ccx  X 


u  +  m 
ccy  y 


(A. 4) 


u  +  m' 
ccz  z 


where,  u  ,  u  ,  u  are  the  commanded  accelerations  around  the  body  axes,  m ' ,  m ' ,  and  m' 

CCX  ccy  ccz  X  y  z 

are  disturbance  accelerations.  The  disturbances  include;  Coulomb  friction,  viscous  friction  and  torque  noise 
of  reaction  wheels,  cross-coupling  and  gyroscopic  torques,  and  external  disturbances. 


Spacecraft  state  equations.  It  is  assumed  that  the  deviations  of  ,i  from  its  reference  value  (  ,  =  0) 


are  small.  Einearization  of  Eq.  (A. 3)  around  <1  =  0,  and  substitution  of  Eq.  (A. 4)  yields 


where  m  ,  m  , 
X  y 
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V  =  u  +  m 

ccy  y 

V  =  U|.^^/cosv  +  m^/cosv  , 
are  given  by,  see  Eqs .  (A. 3,  A. 4) 
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(A. 7) 
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m^  model  linearization  errors. 

m^,  are  disturbance  accelerations.  During  steady-state  motion  the  disturbances  are  small. 


11-10 


Only  during  manoeuvres  the  kinematiL  coupling  ten:is  .!/cos.  and  ,ii,'.'  and  d  i  s  t  n  : -n 

coupling)  need  not  be  si^all  . 


Eqs.  (A.b)  and  (A. 7)  deserve  special  att.ntion.  It  is  desired  that  the  spacecralt  manoeuvres  around  the  sun- 
vector  and  the  y-axis,  while  .  =  0.  Proni  Eg.  (A. 5)  it  appears  that  trie  z-axis  control  acts  as  a  disturhanco 
which  is  not  small,  especially  during  manoeuvres.  It  can  be  seen  that  control  of  the  motion  about  the  sun- 
vector  should  involve  coupled  control  coiiniands  to  tiie  z-axis  and  the  x-axis.  To  this  end  a  control  law  for 
the  motion  about  the  sunvector  is  to  be  designed  (rather  than  about  the  z-axis),  which  calculates  control 
commands  which  are  distributed  in  the  proper  ratio  over  t'le  z-axis  and  the  x-axis.  The  feedforviard  to  the 
x-axis  cancels  the  disturbance  and  decouples  Eqs.  (A. 5,  A. 7).  Of  course  the  x-axis  must  further  bo  stabili.;ed 
by  a  suitable  control  law. 

Rewriting  Eqs.  {A. 5,  A. 6),  A. 7),  taking  into  account  the  above  yields  the  final  state  5pa_e  equations 
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(A. 12) 


(A. 13) 


where  m  =  m  /cosv  is  the  disturbance 

T-  2 

sunvector. 


acceleration  about  the  sunvector,  and  u 


is  the  control  about  th^ 


Here  u^,  u  ,  u  are  controls  for  which  control  laws  are  to  be  designed. 

X  y  ijj 

The  total  control  commands  around  the  body  axes  are 


=  u  -  u  sinv 

CCX  X  -v 

(A. 14) 

'ccy  '  ^y 

(A. 15) 

'ccz  = 

(A. 16) 

where  -u^sinv  is  the  feedforward  control  component  from  the  control  about  the  sunvector  to  the  x-axis,  can¬ 
celling  the  term  o^j,^tgv  and  thus  decoupling  Eqs.  (A. 6)  and  (A. 7). 

Further  decoupling  can  be  achieved  by  additional  feedforward  control  commands  -*v/cosv  to  be  added  to 
and  -yvsiriv  to  be  added  to  These  controls  cancel  the  main  kinematic  coupling  terms,  Eqs.  (A. 8,  A. 10). 

If  necessary,  other  disturbance  components  from  Eqs.  (A. 8,  A. 9,  A. 10)  can  be  cancelled  by  feedforward  as  well. 
In  the  IRAS  control  system  both  the  above  feedforward  controls  to  the  x-axis  have  been  implemented,  the 
tei.dforward  to  the  z-axis  has  been  ommitted. 


APPENDIX  B  ;  MEASUREMENT-  AND  SYSTEM  EQUATION  FOR  THE  GYRO  PARAMETER  ESTIMATOR 

Measurement  equation  of  a  slit-type  star  sensor.  A  slit-type  star  sensor  in  essence  establishes  the 

time  point  t^  at  which  the  spac¥craft  attitude  equals  a  known  attitude.  The  star  sensor  measurements  can 

therefore  be  modelled  by  the  measurement  equation 

y(tl)  =  >(ti)  +  Vj(tj)  (B.l) 

Star  sensor  measurement  noise  is  modelled  as  a  Gaussian  white  sequence  with 

V3  (.)~N(0„4). 

System  equation  of  the  gyro  parameter  estimator.  The  static  input-output  relation  of  the  gyro  ran  be 
descrTBed  by  (see  also  Fig.  6): 

>P,^(t)  =  (6.,^(t)  -  W^|^,(t),  /  (1  ^  t)),  (B.2) 

where  >k-^(t)  is  the  gyro  input  rate,  w^j^,(t)  is  the  total  gyro  drift  rate  reduced  to  the  ininit  axis,  (^|  (t) 
is  the  scale  factor  error,  and  't|.j(t)  is  the  output  siale.l  to  (ale  atou!  the  uitiul  .i-is. 

Assuming  no  mi  sa  1  i  gniw'n  ts  lietwcen  the  gyro  input  axis  and  the  spai.ecraft  axis  i|ives  T',M).  Takino 

into  account  the  offset  angle  ,  the  angular  velocity  .'  around  the  sunvector  is  expiessed  in  terms  of  nyro 

output  by: 

.'(f)  ^  ('A,j(t)(i  *■  s,f(f)  *  W(,^(f)i/tos  (t) 


(  B  .  -i ) 


The  gyro  model  used  for  derivation  of  the  estimator  is  equal  to  the  simulation  truth  model,  figure  6.  The 
gyro  drift  rate  w^^(t)  is  composed  of  a  random  walk  process  W|^(t)  to  model  the  long-term  bias  variations, 

and  an  additive  white  noise  process  w^^(t)  to  model  the  rate  noise. 

The  scale  factor  error  ^^^(t)  is  also  modelled  as  a  random  walk  process,  to  account  for  long-term  varia¬ 
tions.  Mathematically: 

Wdr(t)  =  +  Vn^^) 

fSp(t)  =  w^(t) 

where  the  system  noise  vector  w(t)  =  {w^^(t),  w^j^(t),  w^(t))^  is  a  Gaussian  white  noise  process,  with 
w(t)  ~  N(0,  Q^), 

where  is  the  spectral  density  matrix  of  w{t). 

Substitution  of  Eq.  (B.4)  into  Eq.  (B.3)  yields  the  continuous-time  system  equation. 
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Integration  of  Eq.  (B.5)  over  the  star  sensor  measurement  interval,  yields  the  discrete  system  equation  for 
the  gyro  parameter  estimator: 
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t.|  =  time  previous  measurement 

;  t^^^  =  time  present  measurement 
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The  discrete  system  noise  is  characterized  by: 


v^  ~  N(0,  a^)  is  the  quantization  noise; 


and 


wi  th 
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It  is  noted  that  the  system  matrix  Ag(.),  the  vector  Ug(.)  and  the  system  noise  covariance  matrix  Q^(-)  are 
to  be  calculated  on-line  from  the  gyro  output  Ag(.).  As  the  gyro  output  is  sampled  the  integrals  in  Eqs. 

{B.6)  -  (B.7)  are  approximated  by  summations.  The  gyro  parameter  estimator  is  based  on  system  Eq.  (B.6)  and 
measurement  Eq.  (B.l).  The  measurement  and  system  noise  values  used  for  the  estimator  design  are  summarized 
in  table  2. 
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Fig.  4  Estimation  and  control  algorithms  detailed 
block  diagram 
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Fig.  5  Phase  plane  description  of  modified  time- 
or'^imal  control  law  for  target  model 


Fig.  6  Gyroscope  model  for  gyro  iiarameter  estimator 
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Fig.  7a  Performance  of  gyro  parameter  estimator. 

Gyro  attitude  measurement  error  after  on¬ 
line  correction  for  estimated  drift  rate 
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Fig.  8b  Estimated  disturbance  torque 
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Fig.  7b  Performance  of  gyro  parameter  estimator. 

Gyro  attitude  measurement  error  after  on¬ 
line  correction  for  estimated  drift  rate 
bias 


Fig.  8c  Resulting  control  performance  using  esti¬ 
mator  with  gain  switching:  attitude  error 
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Fig.  8a  Simulated  disturbance  torque 


Fig.  8d  Resulting  control  perfui  ance  using  esti¬ 
mator  with  gain  switching:  velocity  error 
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Fig.  9a  Attitude  error  during  scan-slew-scan 
manoeuvre 
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Fig.  gb  Velocity  error  during  scan-slew-scan 
manoeuvre 
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Fig.  10a  In-flight  attitude  error 
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Fig.  10b  In-flight  velocity  error 
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DOCKING  MECHANISM  FOR  IN-ORBIT  ASSEMBLY  AND  SPACECRAFT  SERVICING 
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SUMMARY 

-^Future  in-or-iit  infrastructure  requires  the  usage  of  a  Docking  Mechanism  Subsystem 
(DMS)  for  in-orbit  assembly  and  spacecraft  servicing.  As  a  first  entry  for  curopean 
applications  unmanned,  autonomous  docking  missions  are  foreseen  as  well  in  low  earth 
orbit  (processing  platforms)  as  in  geostationary  orbit  (communication  satellite 
clustering).  The  Rendezvous  and  Docking  (RVD)  operation  is  a  key  technology  to  realize 
such  typ  of  mission. 

The  DMS  is  imbedded  in  a  system  performing  the  "last  meters"  problem,  where  specially 
the  Attitude  and  Orbit  Control  Subsystem  (AOCS)  closely  cooperates  with  the  DMS. 

The  DMS  itsself  is  composed  of  the  Docking  Mechanism  itself  and  the  Docking  Mechanism 
Electronics.  Dependant  on  the  initial  separation  conditions  two  docking  concepts  are 
considered:  the  DMS-  and  the  AOCS  -  controlled  closure. 

A  first  docking  demonstration  is  envisaged  during  the  EURECA-2  mission  in  1989/90. 


1 .  BACKGROUND 

The  review  of  potential  european  missions  through  the  next  two  decades  shows  an 
evolution  of  space  use  to  achieve  the  following  goals: 

extension  of  commercial  use  of  space 
-  extension  of  scientific  research  by  space  means 

The  operations  necessary  to  achieve  these  goals  are  summarized  in  Table  1-1. 

The  critical  technology  to  make  all  these  methods  workable  is  best  known  under  the 
wording.  These  methods  involve  Rendezvous  and  Docking  (RDV) ,  and  Servicing. 

According  to  that,  RVD  and  servicing  technology  has  to  be  developed  in  Europe. 

(Table  1-2).  This  paper  deals  primarely  with  the  Docking  Mechanism,  certain  aspects 
of  the  RVD  sensors,  and  the  reliability  of  the  total  system. 


2.  THE  RVD  PHASES 

The  RVD  process  itself  is  composed  of  a  sequence  of  RVD  phases  aiming  at  guiding  an 
Active  chaser  Satellite  to  a  Passive  Target  Satellite,  ending  in  the  final  mating  of 
these  two  spacecrafts. 

The  RVD  phase  are: 

Inter  Spacecraft  Acquisition,  which  means  the  identification  of  the  target  by  the 
chaser  for  navigation  of  the  subsequent  phase. 

-  Homing,  which  means  that  both  spacecrafts  are  in  similar  orbits  but  the  chaser 
Satellite  being  on  some  collision  course  for  the  other. 

Final  Approach,  which  means  that  the  spacecrafts  are  in  close  vicinity  and  the 
Chaser  Satellite  is  braking-off  its  collision  course. 

Proximity  Operations,  which  means  that  the  chaser  is  within  the  safety 
range  and  has  to  respect  the  safety  conditions  for  docking,  standby,  flyby,  retreat. 
Docking  Phase,  which  means  the  docking  process  starting  with  the  first  physical 
contact,  then  grappling,  closure  and  finally  latching. 

Mating  of  the  utility  connectors  for  power  and  data  exchange  and  gas/fluid  supply. 

-  Undocking,  which  means,  that  utility  mating  and  docking  phase  are  reversed  and  the 
spacecrafts  are  separated  from  each  other. 

The  Docking  Mechanism  Subsystem  performs  all  operations  which  start  with  the  Proximity 
Operation,  cover  the  complete  docking  phase,  and  the  mating  of  the  utility  connectors. 

To  do  this,  the  DMS  is  responsible  to  perform  the  following  tasks  of  joining  two  space¬ 
crafts. 

Check-out:  verify  DMS  operational  readiness  for  docking,  and  observe  safety 

restrictions 

Grappling:  make  first  physical  contact  and  make  firm  mechanical  conncetion 

between  the  two  vehicles 

Closure:  reduce  kinetic  energy  of  relative  motion,  align,  and  close  vehicles 

together 

Latching:  make  final  alignement  and  provided  rigid  mechanical  connection 

Connection:  provide  electrical,  gas,  and  fluid  supply  lines  for  inter  satellite 
servicing. 


♦This  work  was  done  under  running  ESA  Cont  ract  No .  5 1  9 '>/8  2/NL/BI 
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•  ASSEMBLY  OF  SPACECRAFTS, 
PLATFORMS  AND  ANTENNAS 


OUT  OF  MULTIPLE  MODULES  EXCEEDING  A  SINGLE  LAUNCHER  CAPABILITY 

•  OPTIMISING  OF  SPACE  SYSTEMS  AND  MISSIONS  DUE  TO  BUILT  IN 
FLEXIBILITY  AND  MODULARITY 

•  EXCHANGE,  TRANSPORT  AND  RETRIEVAL  OF.  EQUIPMENT,  SAMPLES,  MATERIAL, 
PAYLOADS,  INSTRUMENTS  TO  AND  FROM  PERMANENT  PLATFORMS 

•  REPLENISHMENT  AND  TRANSFER  OF  CONSUMABLES 

•  MAINTENANCE  AND  REPAIR  OF  DISABLED  SPACECRAFTS 

•  IN  ORBIT  MANIPULATION  TO  ADOPT  A  SPACECRAFT  TO  CHANGING  MISSION 
REQUIREMENTS 

•  RE  ORBITING  OF  SPACECRAFT  TO  PROPER  ORBIT 


TABLE  1.-1  OPERATIONS  FOR  FUTURE  SPACE  MISSIONS 


RVD  TECHNOLOGY  SERVICING  TECHNOLOGY 

-  standardization  and  automation  of  final  approach  —  Pattern  recognition  and  image  processing 

-  target/pattern  recognition  and  image  processing  —  Sensing  techniques  and  feed-back  of  sensor  signals 

-  laser  and/or  radar  systems  for  range,  range  rate  at\d  -  mattipulatioir  algorithms 

angular  measurement 

—  Remote  manipulation  and  automation  of  in-orbit 

-  multi-processing  for  system  autonomy  development 

-  use  of  relay  satellitels)  “  Adaptive  intelligent  systems  definition  and  development 

-  ground  network  involvement  ~  Manipulator  mechanization 

-  docking  mechanisms  (modular,  mission  adaptable)  “  In-orbit  exchange  and  system  re  verification 

-  closesjp  sensors  -  In-orbit  re  supply/fuel  transfer 

-  ultra  reliable  processing  facility  _  Transfer  technology  lor  utilities  and  resources  exchange 


TABLE  1.-2  TECHNOLOGIES  FOR  DOCKING  AND  SERVICING  IN  ORBIT 


3.  GENERAL  CONCEPT  CONSIDERATIONS 

3.1  Docicing  Concept  Parameters 

The  concept  parameters  determine  the  design  of  the  Docking  Mechanism  .Subsystem. 
Especially  "man  rating",  "type  of  docking",  "control  philosophy",  and  "mode  of 
stabilization"  are  of  major  importance.  For  the  european  missions  to  which  the  DMS 
will  be  designed,  the  following  parameters  apply: 

unmanned  vehicle 
non- impact  docking 
reversible  docking 
modular  design 

active  units  concentrated  on  one  vehicle 
autonomously  controlled 
three  axis  stabilized 
central  design 

design  with  possibility  to  add  a  manipulator 


3.2  Docking  Strategies 

If  during  docking,  the  Attitude  and  Orbit  Control  Subsystem  (AOCS)  of  a  least  one 
satellite  is  turned  off,  the  docking  strategy  is  based  on  a  stand-off  concept,  where 
both  spacecrafts  are  separated  from  each  other  by  a  noticable  distance  at  first 
physical  contact.  In  this  case  we  have  a 

DMS  controlled  closure 

An  other  docking  strategy,  incorporating  the  AOCS,  positions  the  two  vehicles  in  very 
close  proximity  in  the  rage  of  a  few  centimeters  at  first  physical  contact.  Because 
of  the  importance  role  of  the  AOCS,  we  call  this  strategy 

AOCS  controlled  closure 

The  DMS  controlled  closure  design  (see  fig.  3.2-1)  uses: 
a  boom  as  stand-off  device. 

The  boom  is  stowed  during  non-operational  conditions  and  is  extendable  and 
retractable 

a  grapple  mechanism  for  first  mechanical  linkage,  including  the  capability  of 
undocking 

and  structural  latches  for  rigid  mechanical  connection,  with  the  capability  to 
unlatch. 

The  AOCS  controlled  closure  design  (see  fig.  3.2-1)  uses: 

-  the  structural  latches  as  well  for  the  first  mechanical  linkage  as  for  the 
final  rigid  mechanical  connection 

a  set  of  near  range  sensors  for  the  proximity  operations  indicated  here  as 
a  set  of  video  cameras  for  a  stereo  image  and  a  set  of  close-up 

sensors  indicating  relative  attitude  measuring  devices  capable  of  measuring  down 
to  a  few  centimeters  and  for  exact  positioning  of  the  two  satellite  surfaces. 

Common  features  in  both  designs  are: 

electrical/gas/fluid-connections 
emergency  undocking  devices 
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Fig.  3.2-1 
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4. 


REQUIREMENTS 


After  the  general  concept  considerations  the  major  requirements  for  the  DMS 
design  are  presented  here. 

The  Operational  Requirements  are  shown  in  Table  4-1 . 

The  Operational  Principles  state,  that  unmanned  vehicles,  are  concerned  and,  at  least 
for  the  last  meter  problem,  do  not  involve  the  man  in  the  control  loop. 

The  Operational  Modes  are  indicating  the  duration  of  the  docking  period 

permanent  docking  stands  for  the  intention  to  dock  once  and  leave  the  two 
vehicles  together 

episodical  docking  stands  for  the  intention  of  a  multiple  docking  capability. 

Nominal  Operations  describe  the  actions  to  be  taken  during  a  nominal  performing  docking 
process. 

Contingency  Operations  describe  how  to  cope  in  general  with  unforeseen  events  which  might 
endanger  either  satellite . 

Operational  Modes:  —  permanent  docking 

-  episodical  docking 

Operational  Principles;  The  DMS  will  be  used  on  unmanned  space  vehicles.  Man  involvement  shall  be  limited  to: 

—  Supervision  oi  DMS  operation 

-  Interpretation  of  housekeepir>g  data 
—  Specially  assigned  stop/go  commands 

-  Contingency  rxf  Emergency  control 

Nominal  Operation:  -  The  DMS  shall  be  checked  for  docking  readiness  prior  to  the  initiation  of  docking. 

-  Nominal  operations  shall  be  based  on  a  predetermined  operational  sequence. 

-  Prior  to  each  sequence  and  after  each  sequence  go  ahead  checks  shall  assess  the 
status  of  the  docking  process  ar>d  the  DMS  Itself. 

—  The  DMS  shall  provide  automatic  correction  and  switch-over  commands  and/or 
control  of  those  functions  from  the  ground,  according  to  the  mission  requirements. 

Contingency  Operations:  -  Emergency  operations  shall  be  initiated  when  any  system  of  either  spacecraft  is 

endangered  artd  safety  is  no  lortger  guaranteed. 

-  Emergency  operation  shall  be  initiated  by  the  DMS  and/or  form  the  ground, 
according  to  the  mission  requirements. 

table  4.-1  OPERATIONAL  REQUIREMENTS 

The  Safety  Requirements  are  shown  in  Table  4-2, 

The  General  Safety  Aspects  give  the  standards  as  well  for  the  operations,  the  design, 
and  the  command  structure. 

The  Safety  during  Docking  Operations  cover  the  real  docking  process  and  has  an  abort 
capability  at  any  point. 

The  Safety  during  Contingency  Operations  state,  that  this  shall  be  done  by  fail-safe 
means . 

The  Safety  during  Emergency  Operations  leaves  the  Passive  Satellite  damaged  so  that  a 
subsequent  docking  attempt  is  feasible. 


GENERAL  SAFETY  ASPECTS 

The  OMS  shall  be  designed  and  fabricated  in  such  a  manner 
that  during  operations  and  grourxJ  handling  all  hazards  to 
personnel  and  other  equipment  are  avoided,  or  minimized 
and  controlled. 

The  OMS  shall  have  no  credible  single  point  failure  which  re¬ 
sults  in  an  unsafe  condition  for  either  vehicle. 

Safety  shall  be  assured  for  all  operational  phases  of  the  OMS. 

The  DMS  shall  make  available  provisions  for  docking  abortion 
at  any  time  arKl  satellite  release  without  damage  to  either  sa 
tellite. 

The  DMS  shall  be  protected  against  false  commands. 

The  DMS  shall  be  designed  to  a  fail  safe,  fail  safe  starxlard. 
The  first  point  of  wiontact  shall  be  grounded. 


TABLE  4.-2  SAFETY  REQUIREMENTS 


SAFETY  DURING  DOCKING  OPERATIONS 

During  the  total  docking  process  no  damage  shall  occur  to 
either  spacecraft. 

The  docking  operation  shall  be  man  supervised. 

There  will  only  be  a  man-initiated  docking  attempt  if  a  redun 
dant  system  within  the  DMS  has  to  be  used. 

The  docking  process  shall  be  abortable  at  any  point  within  the 
process. 

The  operational  performance  of  either  vehicle  shall  not  be 
violated,  following  docking. 

SAFETY  DURING  CONTINGENCY  OPERATIONS 

The  DMS  shall  provide  fail-safe  means  for  Contingency 
Operations. 

SAFETY  DURING  EMERGENCY  OPERATIONS 

In  the  event  of  an  emergency  undocking  there  shall  be  no 
necessity  for  a  redocking  attempt  with  the  same  Active 
Satellite. 
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The  Initial  Separation  Requirements,  given  in  Table  4-3  are  the  basic  design  data  for 
the  Docking  Mechanism.  Of  course,  the  initial  separation  requirements  reflect  the  two 
Docking  Modes.  These  values  apply  to  the  relative  movements  of  two  reference  points  at 
each  spacecraft.  Limit  cycle  motions  of  the  reference  points  have  to  be  considered 
additionally. 


Relative  Movement 

DMS  Controlled 

Closure 

AOCS  Controlled 

Closure 

Misalignment  (m) 

'^xs 

< 

0.1 

'‘xs 

0.02 

0.1 

''ys 

0.02 

<*2S 

< 

1.0 

dzs 

0.1 

Approach  velocity  (cm/sec) 

“xs 

< 

0.5 

''xs 

< 

0.1 

''ys 

< 

0.5 

''ys 

< 

0.1 

''zs 

< 

1.5 

''zs 

0.3 

Angular  misalignment  pitch 

'^'xs 

< 

5 

^xs 

< 

1.0 

(degl 

^ys 

< 

5 

^VS 

1.0 

roll 

«zs 

< 

2 

^zs 

< 

0.5 

Rotational  overspeed 

‘^xs 

< 

0.1 

‘^xs 

0.05 

(deg/sec) 

‘^VS 

< 

0.1 

Wys 

< 

0.05 

<^zs 

< 

0.05 

“zs 

< 

0.05 

TABLE  4.-3'  IMTIAL  SEPARATION  REQUIREMENTS 


The  Physical  Properties  Requirements,  given  in  Table  4-4  describe  the  two  spacecraft 
involved  in  the  docking  process. 

The  Initial  Separation  and  the  Physical  Properties  Requirements  cover  a  very  large  range 
with  which  especially  the  mechanical  design  has  to  cope.  It  is  obvious  that  this  cannot 
be  taken  by  one  mechanism  design  only  unless  the  smaller  satellites  would  have  to  pay  a 
mass  penalty.  Therefore,  the  DMS  concept  has  to  be  a  modular  one,  adaptable  to  the  sped 
fic  requirements  of  each  individual  mission. 


Physical  Properties  of  the  Active  Satellite 


mass  (Kg) 

200  < 

"’A 

< 

4000 

moment  of  inertia  (Kg.m^) 

100  < 

JXA 

<  11000 

100  < 

•'ya 

<  1 

1000 

100  < 

JZA 

< 

8000 

centre  of  gravity  (m) 

0.05  < 

i’^cgaI 

< 

0.25 

(relative  to  DMS) 

0.05  < 

I'^cba' 

0.25 

0.75 

iZgaI 

< 

2.00 

eigenfrequerreies  |Hz) 

'1 

10  Hz 

*2  ^ 

35  Hz 

Physical  Properties  of  the  Passive  Satellite 


mass  (Kg) 

1200 

-p  ^ 

15000 

moment  of  inertia  (Kgm^) 

5000 

JXp  s 

250000 

9000 

< 

Jyp  % 

520000 

12000 

JZp  S 

600000 

centre  of  gravity  (M) 

(relative  to  docking  port) 

0.2 

^CGP 

<  10.0 

0.2 

^CGP 

<  4.8 

0.2 

^CGP 

--  2.5 

eigenfrequencies 

(Hz) 

0.9 

Sv. 

'7p 

^  20 

(f,  -  fg;  rigid) 

1.20 

'8p 

•v  2.0 

1  25 

<. 

'9p 

<  2.0 

TABLE  4-  4  PHYSICAL  PROPERTIES  REQUIREMENTS 
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The  Connection  Requirements  are  listed  in  Table  4-5  and  cover  tne  rL-qu  i  i  -  rit 
electrical  (power  and  data),  gas,  and  fluid  utility  connections. 


ELECTRICAL  CONNECTOR  REQUIREMENTS 


Power  Transfer  of  2  KW  at  a  voltage  of  50  V 
Power  Transfer  of  1  KW  at  a  voltage  of  28  V 

Low  Rate  Signal  Transfer  -  a  total  of  100  lines  (AWG  24) 
High  Rate  Data  Transfer  -  100  Mb/sec 

No  connector  shall  have  more  than  TBD  (50)  pins. 

The  High  Frequency  power  density  per  connector  shall  be 
limited  to  TBD  W  average  for  the  connector. 

The  mixir>g  of  <  gnal  and  power  lines  shall  be  avoided  where 
feasible 

Redufxlant  circuits  shall  not  use  the  same  connector. 

Emergency  power  shall  be  provided  through  separate 
connectors. 


GAS  CONNECTOR  REQUIREMENTS 


A  high  pressure  gas  connector  shall  lie  ()fovHle(j  to  suiiply  80  t  g 
of  gas  at  a  rate  of  100  bar/hr  at  an  initial  (irf'ssurc:  of  280  l)ai . 
leakage  TBD. 

A  low  pressure  gas  connector  shall  be  provided  to  sufiply  100  dm  ^ 
of  gas  at  a  flow  rate  of  100  dm  l/hr  at  an  initial  pressure  of  1  bar. 
leakage  TBD. 


FLUID  CONNECTOR  REQUIREMENTS 


A  fluid  connector  shall  be  provided  to  supply  100  kg  of  freon 
at  a  flow  rate  of  360  kg/hr  against  a  pressure  drop  of  6  bar, 
leakage  0.1  cm^/hr. 

A  fluid  connector  shall  be  provided  to  supply  500  kg  of 
bipropellant  (TBS)  at  a  flow  rate  of  20  kg/hr  against  a  pressure 
of  TBD  bar;  leakage  TBD. 


TABLE  4.-5  CONNECTION  REQUIREMENTS 


5.  DOCKING  MECFIANISM  SUBSYSTEM  DESIGN 

5. 1  Docking  Mechanism  for  DMS  Controlled  Closure 

The  Initial  Separation  Requirements  dictate  on  the  Active  Satellite 
a  stand-off  device  for  bridging  the  stand-off  distance 
a  grapple  mechanism  for  initial  physical  contact  and  firm  fixture 
and  on  the  Passive  Satellite 

a  (passive)  guidance  for  the  grapple  mechanism. 

This  overall  Docking  Mechanism  concept  leads  to  the  following  general  description  for 
the  DMS  controlled  closure  (see  Table  5.1-1). 


GENERAL 

DESCRIPTION 

ZERO-IMPACT,  DROGUE/PROBE  SYSTEM 

FUNCTIONS 

ACTIVE  SATELLITE  ELEMENTS 

PASSIVE  SATELLITE  ELEMENTS 

Grappling 

Damping 

-  Grapple  mechanism  on  top  of  an 
extendable/retractable  boom  for 
initial  contact  at  stand-off 
distance  and  initial  firm  contact 
with  alignment  capability 

-  axial  and  lateral  dampers  to 
handle  the  translatoric  and 
rotatoric  excess  energy 

Passive  guidance  for 
grapple  mechanism  (no  active 
parts  on  -passive  satellite) 

Closure 

-  Retraction  of  boom 

OPTTONAI,  EI-E.MENTS 

Latching 

Connection 

-  Latches  with  final  adjustment  capa¬ 
bility  to  bear  the  structural  loads 

-  Add-On  features,  independent  of  boom 
and  latches 

.  Acutation  capabilit-c  of 
boom  to  minimize  initial 
m i sa  1  iqnmen t 

Undocking 

-  Opening  of  latches,  extension  of  boom 
and  release  of  grapple  mechanism 

.  .active  dampinu  Ijy  use  i-f 
specific  elements  and 
control  software 

Emergency 

Provisions 


Pyrotechnics  Devices 

Springs  to  grantee  minimum  separation 
velocity 


The  qeneral  outline  of  that  system  is  qiven  in  Fiq.  5.1-2  and  the  detailed  i 

Fiq.  5.1-3.  This  concept,  as  shown  in  Fiq.  5.1-3  tries  to  incorporate  at  a  very  larl 

sta-io  of  the  conceptual  design  the  safety  and  redundancy  features. 

The  conceptual  design  features: 

a  telesco|)ic  boom  as  stand-off  device 
a  grapple  latch  with  three  legs 

a  redundant  grapple  latch  drive  mechanism  to  open  and  close  the  lects 
a  passive  drogue  on  the  passive  satellite  with  grooves  for  roll  a  1  i  yinrr 'p.t  . 


Passive 

Satellite 


Mechanism 


Fig.  5.1-3  Boom  Concept  Detailed 


To  make  a  trade-off  between  at  least  two  designs  and  to  evaluate  to  a  liettor  deriree  tlie 
probe/droauG  concept,  a  claw-tyfi  grapi>le  mechanism  v;a.s  designed.  Tt  was  sliown,  that  such 
a  concept  is  feasible  too  and  has  its  benefits. 


■■2  Docking  Mochanisiii  f 'ir  AQL'S  Controlled  C’ 1  finuri' 

The  Initial  Separation  Rogu  i  roments  for  tliis  ca.se  allov;  to  skip  tlv  stand-orf  ('..viC'- 
as  necos.sary  element  on  I  he  I5MS  cont.rol  lc?d  closure  coni.-epts .  IKiv/ever  it  add:;  on  t!].-  Act  i'.'-- 
Satellite  the  following  elemcnls: 

special  close-up  sensors 

a  derivative  of  tfio  structural  latches  as  u:s(.>d  on  tlie  DMS  controlletl  clcsur'-  versioij. 
This  overall  Docking  Mechanism  concept  leads  to  the  follov/iri't  (i.noral  h -scr  i  p  t  i 'ju  for  tin 
AOCS  controlled  closure  (see  Table  1.2-1). 


GENERAL 

DESCRIPTION 

ZERO  IMPACT,  NO-PROBE,  NO-DROGUE  SYS'I’EM 

FUNCTION.S 

ACTIVE  SATELLITE 

PASSIVE  SATELLITE 

Guidance 

Special  close-up  sensors  deliver 
information  to  guide  the  Active  .Satellite 
within  the  gathering  raneje  of  the  iirapp- 
ling  latches. 

Cri.ic  i  rorin  stand-off 
device  (no  aclivo  parts) 

Grappling 

Closure 

Latching 

Combined  In  one  mechanism  (typically: 
latches)  whicli  does  these  functions 
subsequently . 

Damping  is  included  within  tlie  mechanical 
and  electro/mechanical  units. 

Connection 

Add-on  features,  independant  of  latches. 

Undocking 

Opening  of  latches  and  separation  velocity 
provided  by  AOCS. 

Emergency 

Provisions 

-  Pyrotechnics  Devices 

-  springs  to  guarantee  a  minimum  separation 
veloci ty . 

TABLE  5.2-1:  GENERAL  DESCRIPTION  OF  AOCS  CONTROLLED  CLOSURE  CONCEPT 


Special  attention  within  the  AOCS  controlled  closure  concept  has  to  bo  payed  for  the 
close-up  sensors.  Besides  the  “normal"  relative  attitude  data  like  relative  range,  range 
rate  and  ancjular  offsets,  the  docking  surfaces  of  the  two  spacecraft  have  to  be  considered 
Narrowing  two  spacecraft  to  within  0.1  m,  is  onl>  possible,  if  the  two  docking  surfaces 
match  to  each  other  without  touching.  Taking  into  account  the  safety  philosophy  and  some 
po.'^sible  restrictions  frem  the  approach  corridor  during  the  final  RVD  phase,  this  loads 
yon  to  a  RVD  sensor  concept  with: 

redundant,  overlapping  measuring  ranges. 

To  give  an  exanifile: 

medium  range  sensors:  from  1000  m  to  1  m 
near  range  sensors  :  from  5  m  to  0.1  m 
close-up  sensors  :  f ron:  0.3  m  to  0.05  m 

Till'  sensors  specifically  re<iardod  for  the  AOCS  controlled  closure  are  the  near  rantie  and 
the  clost:-up  sc'nsor.  As  a  desi<jn  and  selection  guldline  for  these  sensors  tlu'  following 
should  apply: 

sen.sors  should  lie  as  simple  as  possible 

sensors  should  as  far  as  possible  rely  on  jiassive  moans  on  the  pa.ssive  satellite 
sensors  shall  -with-stand  the  service  life  without  degradation  or  liav>'  tiie  possiijiJity 
of  calibration,  also  by  the  sensors  with  overlapping  range'. 

As  a  possii)li-'  .solution,  the  followlri'T  concepts  have  emorgi'd: 

for  f  iv  n<.;ar  ranej.'  sensors:  a  .system  of  position  sensitiv*.'  de'ti'oior:;  on  (  he  Actiw 

.lafellite,  illuminatiHl  by  LEDs  on  tlie  ra;.;;i'.-e  .latellite 

for  Mie  oloso-up  f;ensors  :  a  system  of  proximity  sensors,  self  i  I  Lain  i  nat  i  ng  ly  in- 

f  raretl  pliototrans  i  stor  s  and  receiver.s  tm  (lie  Active 
.Sat-elJife  and  a  small  refleclive  foil  on  tie'  Passive 
Sa  t  e 1 1 i tc . 


t.  i  Dejck  i  ng  .'•(>'  'ihi  n  i  :;m  Electronics 


'I  !;■'  iJookine  M<'ciianism  Elr'ctronics  (DME)  has  (  ■  Ijc  imbedtieti  in  t  lie  I  ot  a  1  RVD/AOCS-  loo 
tronier;  oon'-'”*  -..i,  ;  a,-,.,,.  ..^.i  -affect  t'ni-  ) 'O.ss  ib  i  1 1  Ly  to  design  i  tie  DME  in  i  I  o-  n  boxes 

for  integrat  ion  in  Mu'  DM.I .  Ma  ior  influonce  on  the'  DME  con.-ejat  Itas  the  iinpos'.  d  ,saf'  ty 
p;i  i  1  o';i)[  >ny .  '['lie  regu  i,  r'omi'nts  derivofl  friim  tdiore  for  tdie  DME,  'which*  shriu  Id  be  impuis*'*!  <at 
b'ast  for  tile  RVD  E 1  ec  t  ron  i  e'S  .as  v/e  1  1,  Lead  to  ,a  DME  concept  bart'-d  on: 

fault  tolerant  com|)Uting,  by 
u  1 1  r  a- re  1  Lab  1  e  ormiputer  system,  w  i  t  li 
trifil"  modular,  dynamic  redundancy. 


anri  a 


I 


A  general  outline  of  this  structure  is  given  in  Fig.  5.3-1  with  the  following  major  blocks: 
The  Process  Control  Block  (PCB)  performs  the  overall  control  of  the  RVD  procedure  and 
coordinates  major  timing  functions,  processes  the  commands  to  and  from  the  spacecraft,  and 
makes  decisions  which  RVD  procedures  are  executed  or  aborted.  So  the  PCB  executes  the  normal 
docking  sequence  and  handles  exceptions  and  faults. 

The  RVD  Sensing  Block  (RSB) handles  the  near  range  and  close-up  sensors  and  commands  and 
controls  the  electro  mechanical  units  in  the  Docking  Mechanism. 

The  Image  Processing  Block  (IPB)  extracts  pertinant  information  from  the  image  data  generated 
by  the  RVD  sensors  and  converts  the  raw  sensor  data  into  image  features.  It  also  eliminates 
errors  or  takes  information  from  the  image. 

The  Analysis  Block  (AB)  interprets  the  image  features  and  determines  the  relative  attitude  of 
the  two  spacecrafts.  As  this  is  a  very  important  role,  the  AB  is  fault  tolerant. 

The  Back-Up  Module  (BUM) is  a  processor  and  memory  area  where  any  of  the  before  mentional  pro¬ 
cessors  may  have  access  for  reconfiguration  in  case  of  failure. 


Bus  1 


TMR:  Triple  Modular  Redundancy 
■;  Block  Coupled  by  Dynamic  Redundancy 


Fig.  5.3-1  RVD-Data  Electronics  Concept  for 

Fault  Tolerant  Computing  by  Ultra  Reliable 
Computer  System 


The  Docking  Mechanism  Power  Rloctronics  has  to  reflect  the  DM:-  safety  [diilosophy  as  well, 
tt  features  a  dual  Independant  main  power  bus  for  th.?  nominal  dockinir  and  undocking 
process  and  an  emergency  power  bus  to  power  the  emergency  undocking  units  within  the'  DMS . 


IMG 


5.4  Connection  Mechanism 

The  design  concepts  of  the  Connection  Mechanism  for  satellite  servicina  obey  in 
principle  to  the  same  general  requirements  as  the  Docking  Mechanism  itself  does.  From 
this  point  of  view  the  following  design  guidelines  are  obvious: 

elements  on  the  passive  satellite  have  to  be  reusable  after  emergency  undockina 

no  pyrotechnics  on  passive  satellite 

fixed  connector  plates  on  passive  satellite 

minimum  travel  distance  to  mate  both  connector  plates 

no  structural  load  path  through  the  connectors 

With  these  guidelines  in  mind,  there  are  still  many  possible  solution  for  the 
Connection  Mechanism,  for  example: 

single  central  or  multiple  peripherial  actuators  to  move  the  connector  plate 
quadratic  or  rectangular  connector  plate 
multiple  or  single  connector  actuation 
unidirectional  or  bidirectional  actuation  direction. 

Designed  in  that  way,  the  Connection  Mechanism  forms  an  Integral,  separately  mountable 
subassembly  within  the  Docking  Mechanism  Subsystem. 
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THE  INFLUENCE  OF  SENSOR  AND  THRUSTER  IMPERFECTIONS 
ON  THE  ATTITUDE  AND  POSITION 
OF  A  SPACECRAFT  PERFORMING  A  RENDEZ-VOUS 
BY 

R.  ANCILLOTTI  and  C.  CASSI 
AFHITALIA  -  Space  Systems  Division 
Via  Servais,  125 
10146  TORINO 
I  Laly 


LIST  OF  SYMBOLS 


t 


g  (R)  =  gravitational  acceleration 

=  thrust  acceleration  un  the  target 

a  -  "  "  ”  the  chaser 

c 

position  of  target  and  chaser  center  of  mass 
tine 

universal  constant  of  gravitation 
earth  mass 

angular  velocity  of  the  earth 
phase  angle  at  t  -  0  when  RV  begins 
E.iler  angles 
K'jler  angular  rates 

right  ascension  and  right  ascention  rate 
decllnaiton  and  declination  rate 
range  and  range  rate 
generical  angle  and  angular  rate 
maximum  measurement  angular  error 
maximum  allowed  angular  error  (phase  plane) 
proper  multiplier  of  the  sensor  error 
cartesian  state  vector 
polar  state  vector 

Aa,  ^a,  Ai,,  Ay  =  intrinsec  error  on  the  laser  radar  absolute  value 

A  Y,  Al,  Ax,  Ay,  Ax  =  measurement  error  on  the  cartesian  coordinates  absolute  value 


R  ,  R  = 
t  c 

t  = 

G  - 

M  = 

0)  . 

o 

ir  = 

0 

(D ,  Q ,  <t> 

i.  Q,  V  - 

A,  A  - 
L.  L  - 

f'f^  ^ 

0,  e  = 

A  . 

N  >  4  = 

C  = 

P 


LOS 

,_^^,L0S“ 

1  ' 

11 

SUN 

SUN 

h'' 

,v 

^c’ 

(3  , 

n 

c 

T 

F  , 

F  ,  F 

XN 

YN  ZN 

ii 

r  r 

A 

A  t 

- 

V 

V 

T  = 

a 

T  - 

p 

: 

I  ^ 

V 

M  = 

r. 

P 

N  ^ 

1 

V 

r 

E  v= 


rotation  matrix 

line  of  sight  direction  in  the  chaser  and  target  frame 
sun  direction  in  the  chaser  and  target  frame 
LOS  direction  in-plane  angle  in  the  chaser  and  target  frame 
LOS  direction  out-of-plane  angle  in  the  chaser  and  target  frame 
sun  direction  out-of-plane  angle  in  the  chaser  and  target  frame 
=  nominal  thrusts  in  the  X,  Y,  Z  directions 
impulse  for  the  attitude  control 
minimum  actuation  time 
thrust  Level  of  the  attitude  engines 
thrust  level  of  the  position  enginen 
minimum  impulse 
propellant  consumption 
maximum  number  of  impulses 
propel  Ian t  con sump  t i on  rate 

nominal  velocity  in  X  and  7.  directions  to  eliminat.e  l.itfr-al  misalignments 
nominal  measurement  error  on  the  lateral  velocities  X  and  7. 
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SUMMARY 

■'The  open  .  onal  conditions  of  two  spacecrafts  performing  a  rcndez-vous  in  geostationary  orbit  ar,-  iMv«’n 
with  the  relative  motion  equation  and  the  relevant  control  law.  The  concept  of  positriori,  velocity  arid 
attitude  measurement  of  the  chaser  vehicle  with  respect  to  the  target  one  is  given  in  order  to  allow  tfi^- 
evaluation  of  the  measurement  errors. 

Simulations  show  the  effect  of  the  errors  sources  on  the  flight  path  of  the  appraoching  v»^hicle  and  fc.urit 
out  the  necessity  of  a  good  matching  between  the  sensor  accuracy  and  the  minimum  impulse  level  c-f  the 
actuation  system. ^ 

1  -  INTRODUCTION 

The  Rendez-vous  manoeuver  results  to  be  a  very  important  phase  in  the  assembling  of  large  space  structures 
by  multiple  launches  of  dockable  modules.  Telecommunication  platforms  require,  in  particular,  Pendez-vous 
and  docking  manoeuver  in  geostationary  orbit. 

The  following  operational  conditions  and  system  layout  have  been  assumed; 

The  target  is  a  rigid  satellite  waiting  in  GEO  on  station  position  for  the  chaser  one. 

It  is  equipped  with  the  standard  instrumentation  for  the  three-axes  stabilization  plus  a  laser  radar 
instrumentation.  The  chaser  starts  the  RV  manoeuver  when  it  falls  into  a  100  km  neighborhood  from  the 
target  and  the  mutual  acquisition  is  established. 

Launch,  circularization  and  orbital  drifting  phases  (to  recover  the  angular  displacement  separating 
it  on  GTO  from  the  target)  are  intended  to  be  already  completed. 

Chaser  is  a  rigid  three  axes  stabilized  spacecraft  and  its  RV  instrumentation  consists  of: 

i)  An  optical  telescope  placed  in  front  of  it  in  order  to  receive  the  light  emitted  by  the  target, 
necessary  for  relative  attitude  measurement; 

ii)  A  certain  number  of  corner  reflectors  in  order  to  reflect  back  the  signal  toward  the  target; 

iii)  A  sun  sensor  for  attitude  measurement. 

A  S-band  link  between  target  and  chaser  is  provided  in  order  to  allow  the  exchange  of  informations  and 
actuation  signals. 

The  target  spacecraft  (T.  S/C)  is  assumed  to  be  completely  controlled  either  in  attitude  and  in  position. 
The  chaser  attitude  and  position  are  controlled  by  an  all  thrusters  actuation  system,  figure  1  gives 
the  sensor  and  thruster  layout  of  the  chaser  spacecraft  (C.  S/C). 


2  -  RENDEZ-VOUS  MATHEMATICAL  MODEL 

Considering  the  T.  S/C  and  C.  S/C  centers  of  mass  (see  fig.  2)  and  referring  to  an  inertial  frame  centered 
in  the  earth,  the  vectorial  equation  of  the  relative  motion  (C.  S/C  with  respect  to  the  T.  S/C)  is: 
{Ref.  1): 

0^  Jltc-  ’  g  (Rc ) -  g (Rt } 


neglecting;  .  earth  oblateness 

.  atmospheric  drag  perturbation 
.  luni-solar  perturbations 


and  assuming  one  can  write:  (Ref.  1) 


X_3Rtl£l.RtJ_ 

R?  [Rt  R3 


Assuming  a  target  fixed  ref.  frame  centred  in  its  GC,  which  translates  maintaining  its  axes  parallel 
to  the  earth  fixed  inertial  ref.  frame,  the  following  three  equations  are  olitained  assuming 


^  f'  (i.e.  only  the  chaser  performs  active  RV): 

*  r  2  1 

»  =  -(Dq  X  1-  3  cos  (Wot  ‘  to)  -  3  /  2  y  sin  (2 Wot *2  to) 
y  -  3/2  X  sin(2Wo,*2  to)  *  V  jj-  3sm*{ii)ot*  to)J 


i  s  -  1^0  Z 


Assuming  a  chaser  fixed  reference  frame  (x^  ,  7.^^)  as  in  fi*?,-  the  uLtirude  motion  of  thf-  ohas^r- 

in  this  frame  is  described  by  the  three  Euler  equations:  (Ref.  J) 

P  =  T  /A  -  OR  (C  -  B)/A 

?  "  -  PR  (A  -  C)/B 

R  =  T^/C  -  PQ  (B  -  A)/C 

Referring  now  the  angular  motion  to  a  frame,  parallel  to  the  {x,  y,  z)  one  centered  in 

the  target,  it  is  possible  to  write; 

0  =  P  ♦  0  sin  0  tan  ©  ♦  R  cos  0  tan  © 

0=0  cos  0  -  R  sin  0 
Y  =  (0  sin  0  4-  R  cos  0)/cos  © 

3  -  POSITION  AND  VELOCITY  CONTROL  LAWS 

Two  complementary  strategies  have  been  adopted: 

a)  velocity  control  at  long  range  from  the  target  ("collision  course") 

b)  position-velocity  control  at  short  range  performing  the  line  of  sight-docking  axis  alignment 

Strategy  (a)  is  accomplished  following  the  phase  diagram  of  fig.  4  showing  the  dipendence  of  the  range 
C:-  te  p  on  the  range  ^  . 

This  type  of  control  forces  the  velocity  of  the  chaser  to  be  completely  radial  with  respect  to  the  given 
reference  frame  centered  on  the  target. 

X.,  =  P  cos  Lcos  A 
N  »  N 

y.  =  9  cos  Lsin  A 
N  *  N 

^ 

being  A  =  L  =  0  for  radial  motion  (See  fig.  5),  and  Ine  nominal  range  rate. 

Fig,  6  shows  the  block  diagram  of  the  procedures  to  be  performed  by  on-board  computer  in  order  to  control 
this  approaching  phase. 

Strategy  (b)  is  accomplished  controlling  (x,  x)  and  (z,  z)  according  to  the  ON-OFF  concept  of  fig.  7 
and  (y,  y)  following  the  phase  plane  diagram  of  fig.  4.  An  analougous  block  diagram  of  the  on-board 
computer  procedures  is  shown  in  fig.  8. 


4  -  CHASER  ATTITUDE  CONTROL  LAWS 

The  chaser  vehicle  is  three  axis  stabilized  via  an  ON-OFF  control  strategy  independently  operating  on 
each  axis  as  fig.  9  shows.  The  (©,  ©)  status  is  maintained  within  the  plane  strip  lirriii'^d  by  the  two 
straight  lines: 

©  +  C5  0  =  A  and  ©  +•  ^  ©  =  -  A  where  A  =  N  E  N  ^  4 

The  body  reference  frame  (x  ,  y  ,  z  )  of  the  chaser  is  always  maintained  parallel  to  the  frame  centered 

B  B  B 

in  the  target  (see  fig.  10). 


5  -  CHASER  POSITION  MEASUREMENT  CONCEPT 

Position  and  velocity  of  the  chaser  vehicle  with  respect  to  the  target  are  directly  measured  on  the 
latter,  collecting  by  the  optical  telescope  the  light  reflected  back  from  the  corner  reflectors  of  the 
chaser . 

These  measures  will  be  obtained  in  a  polar  form: 

■p  =  (P,  .  P,  .  Pa  .  P,  .  Ps.Ps)  =  (p.  A.L.p.I.L) 

and,  If  necessary,  will  be  transformed  in  cartesian  form,  using  the  well  known  transformations  to  give; 


c  =  (C,  ,  C2,C,,C„  Cs  ,  Cs)=(x.y,z.i.y.  i  ) 


L!-4 


•4 


With  the  aim  of  comparing  two  types  of  1  ase.*r-radar  (pee  ref.  i ;  a  first  »'v 
on  the  cartesian  state  vector  C  as  a  function  of*  the  measurement  err<sr*:; 
has  been  performed  introducing  the  error  propagation  formula  at  fir*st  order: 


AC. 


E 

1:1 


6Cj 


<)p; 


A  Pi 


I  1  MO  t.  i  I  )fi 
<  >i\  the 


,  6 


'if  the'  .'itj;- 
1  ,jf  s  t 


:  I  j  t  <  •  •■•r'T-e.-' 


Hereafter  the  results  are  shown  for  two  different  laser  radar  devices  tl  >f.g  with  the  opcr  a '  :  (jn.i  1 

conditions  chosen  for  the  numerical  eviuations.  ^ 

The  following  angular  positions  and  rates  for  the  chaser  are  chosen  in  all  the  p  cases; 

A  =  -  90°  -  -  l.bVOB  rad 
•  -5 

A  =  7.29  10  rad/s  (o?arth  rotation  rate) 

L  =  0.01  rad 
L  =  .0  rad/s 


i)  sensor  errors 

3.000  m<p<  120.000  m  (long  range) 
Ap  ==  0.5  % 

Ap  =  0.2  % 

^  A  =  Al  =  0.1°  =  0.005  rad 

A  A  =  Ai.  =  0.5  lo"^  rad/s 

0<  p  <  3000  m  (short  range) 

A  p  =  0.1  m 

A  P  =  0.03  m/s 

A  A  =  Al  =  0.005  rad 

£.A  =  Al=  0.5  lo"'’  rad/s 


The  results  are  shown  in  table  I. 


f-  ilKlOO  r-. 

If" 

f  =  JOOOO  M 
f=  1.7o63m4^ 

p  Mooo  r  100  1 

p  =  0.206  M^j  P  =  0.05m^^^i 

/j  X 

8^1.9957  M 

16.9991  M 

1.6999  m  1  0.1699  m 

Ay 

250.8375  M 

50.1675  M 

0.1169  M  '  0,1017  M  1 

Az 

87.4957  M 

17.4491  M 

1.7010  m  0,1710  m 

AX 

5.0064  m/sec 

0.5003  m/sec  j  0,0501  m/sec 

0.0613  m/sec. 

0.0351  m/sec  I  0,0305  m/sec 

. 

AZ 

?5.004i^^/J  5.0028  .-VsEc 

0,5006  m/sec  ’  0,0504  m/sec 

1 

i  i  )  (K’nsor  errors 


Ap  . 

Ap 

AA:  AL 
Aa  =  al 

The  results  are 


0,1  m 

_5 

M  m  /  s 

4 

10  ^  rad 
10"  rad/s 


shown  in  table  II. 


6=50000  M 

6=10000  M 

A  X 

=  4.9997  M 

0,9999  M 

a"/ 

’=  0,iT99  m  ' 

o.jogy  V 

AZ 

5.0007  ^  M 

l.OOO'l  M 

a1 

=  0.5003  m/s 

0,1002  M/s 

AY 

=  5,3779xI0‘^ 

1.0846x10"^ 

m/s 

,  o/s 

Azi 

=  0.5003  m/s 

0,1002  M/s 

CMASEK  ATTITUDE  MEASUREMENT  CONCEPT 


The  attitude  of  the  chaser  is  obtained  measuring  the  line-of  sight  (U  LOS)  and  r,he  sun  direction  vector 
vU  SUN)^  either  in  the  target  and  in  the  chaser  reference  frame. 

iU'.r.g  A  the  linearised  (3,  2,  1)  rotation  matrix  from  target  to  chaser  reference  frame  and  ,  Q, 

k'  :  he  huler  angles,  it  is  possible  to  write: 

^  1  V  -0 

T"-  -vj)  1  0 

Q  -0  1 


1.03 


A  U  T 
LOS 


U  C  A  IJ  T 
SUN  3ur; 


( 1 ) 

(2) 


referr 

ing  t(j 

fig- 

11  it 

1  s : 

=  (u; 

T 

A) 

=  (cos 

c 

lUv 

,  Uz ) 

=  (cos  JCp 

LOS 

TiT 

SUN 

T 

,u',) 

=  (cos(3 1 

=  (u^. 

C 

^  U  Y 

=  (cosj3p 

cos  iij ^cos'6j  stn  ) 

cos  ,cos  )5c  sin  ,  sin  J(c) 
cos  Of  cos  sin  sin  ) 
coso<c,cos/ig  sin  oc^, ,  sin  0^) 


Combining  the  f’  st  two  '“quations  (1)  and  the  last  equation  (2)  we  have  the  following  linear  system 
in  the  variables  ^  ,  0,  0: 

y  cos  jj  sini)  -0sirij|  =  cos  ^  cos  6  -cos  J^cos  6,^ 

Wens  \  ci'si)  -0sin)J  =  cosli  sin6  -cos  K  :>int) 

'  U  c  c  T  T  c  c 


0  cosh  LMC.Of  sin  Of  siriB  -slnB 

c  c  c  c  c  f 

The  sys  em  ha:-)  been  resolved  by  the  Cramer  method. 
Let  D  be  the  cot*f  f  ic  ients  determinant: 

D  cosjf  sin  if  cosB  (5»in6  cosOf  -cos  ^  sinof  ) 
uc*cc  c  c  c  c 


Then  the  Euler  angles  expre.^rsion  as  function  of  the  angles  computed  by  the  sensors  are: 


11/  z  fcsin  /J.-  sin  /3_)  sin*  J  -  si  n  jj.  cos/3,  sin  o<.(cos  I  sin  6  -  cos  !!-  sin  6  )•*  sin  cos  R  cos  o< 

•LC  T  C  ^  ^  ^ 

(cos  cos  (ip-  cos  cos  cos  tJy/JD 


A  first  ov/oluation  of  .Aw,  A0  have  be('n  made  applying  again  the  error  pr^p.-igat  ion  1‘ormul.i. 

Numerical  example.s  show  that,  variation  of  y  ,  0,  0  are  very  light  in  the  1. oscillation  range  during 
RV . 

Bc’  i  ng  . 1 ”  for  the  sun  sensor  measured  angles 

and  Aaf|^P  .()Ob'''for  the  laser-radar  measured  angles,  the  errors  on  Euler  angles  result  to  he: 

^0  =  Ay=  .031" 

Aq  ,  .11" 


7  -  THRUSTERS  MISALIGNMENT 


Thrusters  mechanical  misalignment  is  taken  into  account  in  fig.  1.’  where  h  is  a  chaser  ts 

F  ,  F  represent  the  forces  due  to  the  three  thrusters  mounted  con  that  rf»rner. 

YN  ZN 

Everyone  of  these  devices  is  misaligned  with  respect  to  its  nominal  dirertion  by  angp'r. 


fi'T-  ind 


X  'nd 


f-'  . 

XN 

1 

X  ‘ 


figure  shows.  Because  the  statuiard  irdsal  igntrienl  ir 
being  the  1  %  of  the  nominal  ones. 


h'^  p*--r'‘  -irti 


8  -  NUMERICAL  SIMULATIONS 

Two  different  simulations  have  been  done  starting  J'rorn  the  romr!':>n  initial  cnud  i  1  i  on::  oi  Tutdr*  i 
The  two  simulations  represent  the  behaviour  of  the  appi*oach  i  ng  vehicle  equippeii  with  t  uifio: 
measurement  systems,  (Table  IV:  coarser  sensor  errors,  Table  V:  more  accurate  ner,;;or  ^Tror'iii. 


TABLE  III  : 


INITIAL  CONDITIONS 


Y  =  -  60m 


X  =;  0.1  m/s 
Y  -  0.95  m/s 
Z  -  0.1  m/s 


0  -  Q  r  y  --  rad 

0  ^  Q  :  ■-  o.OOOl  rad/s 


COARSER  SENSOR  ERRORS 


E  p  =  0.1  m  E 

E  p  =  .03m/s  E 

E0  =  E0  =  Ey=  .87 
E0  =  E0  =  E<J>=  .87 


EL  =  1.75  10 


MORE  ACCURATE  SENSOR  ERRORS 


0.1  m  EA 

0.1  10  m/s  EA 
EG  =  E  y  = , 524 
EG  =  E  y  = . 524 


EL  =  -1 


10  rad/s» 


-3 

.  1  10  rad 

_  4 

.1  10  rad/s 


Tables  VI  and  VII  give  the  final  conditions  for  the  two  cases. 


FINAL  CONDITIONS 


1st  ERROR  SET 


X  =  -  1.21 
y  =  -  4.2  m 


X  =  0.0015  m/s 

y  =  -0.004  m/s 
z  =  0.00345  m/s 


0  =  0.0525  rad  (=  1.44°)  <  0.04  rad  (=  2.29°) 

9  =  0.041  rad  (=  2.35°)  <0.043  rad  (=  2.46°) 
y  ^  0.0108  rad  (=  0. 619° )<  0. 0125  rad  (=  0.71°) 

Attitude  propellant  consumption  =  0.0053  KG 
Position  propellant  consumption  =  1.584  KG 
Total  propellant  consumption  =1.6  KG 


(2)  =  0.00076  rad/s  <  000128  rad/s 

=  0,000468  rad/s  <  0.00115  rad/s 
y  =  0.000191  rad/s  <  0,0007  rad/s 


TABLE  VII 


X  =  0 . 00 1  m 


z  =  0.001  m 


FINAL  CONDITIONS  :  2nd  ERROR  SET 

X  =  0.O()0G7  m/s 
y  --  C>.000ir>  m/s 
=  0.00067  m/s 


0  =  -  0.001  rad  (-  -0.057°)  < 
0  =  -  0.01  rad  (=  -0.57°>  < 
y  =  -  0.002  rad  (  =  -0. 1 IM  < 


-  0.005  rad  (=  -0.28" ) 

-  0.015  rad  (=  -tj.86°) 

-  0.003  rad  {  ^  _f).  17° ) 


\ttitude  propellant  consumpt ion  = 0 .81 3  KG 
Position  propellant  consumpt.  i  on  =  1.325  KG 
Total  propellant  consumption  =  2.138  KG 


{i  <  0.000?  rnd/;-, 

6  <  n.ooo?  rad/M 
(^<  0.000?  rad/:; 


In  table  VI  and  Vlt  the  maxirmim  values  achiever]  liurinK  the  n  i  riu  1  a  t.  i  onn  are 
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The  second  case  shows  the  following  characteristics  with  respect  to  the  first; 


i)  better  alignment 

ii)  lower  angular  rates 

iii)  lower  lateral  displacements  and  velocities 

iv)  very  higher  propellant  consumption  for  attitude  control 

v)  slightly  lower  propellant  consumption  for  position  and  velocity  control. 

The  main  result  of  the  simulations  is  that  a  higher  attitude  thrusters  impulse  level  leads  to 
a  higher  propellant  consumption  if  the  more  accurate  measurement  set  is  maintained  and  if  more 
stringent  attitude  control  is  applied. 

Owing  to  this  reason  other  two  cases  have  been  simulated  maintaining  the  more  accurate  sensor 
system  and  control  laws,  but  varying  the  impulse  level: 


I  ^t  T 

a  a 


T 


P 


0.2  0.2  1  10 

0.02  0.2  0.1  10 


Fig,sl3  and  14  report  0  Euler  angle  and  its  angular  rate  0  for  I  =  0.2  Ns.  Fig.s  15  and  16  show  the 
same  parameters  for  T  =  0.02  Ns. 

The  propellant  consumption  is  reported  in  table  VIII. 


TABLE-  VIII 


I  Ns 

Mp  (g/s) 

Ni 

S ( g/s  ) 

2 

813 

162 

7 . 39 

0 . 2 

5.3 

16 

4.82x10 

0.02 

5.32 

147 

4.83x10 

The  results  show  a  drop  of  it  to  a  minimum  of  5.3  g  for  110  s  of  flight  but  an  increase  of  the  maxi¬ 
mum  number  of  impulses.  The  optimal  condition  is  obtained  for  I  =  0.1  Ns  with  only  16  impulses.  Rendez¬ 
vous  time  constraint  suggests  to  increase  the  thrust  level  of  the  position  control  engines.  For  ills 

reason  we  investigate  the  case  where  T  =  20  N,  T  =  1  N  and  t  =  0.2  s. 

P  3 

It  has  been  observed; 

i)  A  doubling  of  the  disturbing  torque  which  leads  to  an  increase  of  the  attitude  control  frequency 
and  of  the  relevant  propellant  consumption. 

ii)  An  increase  of  the  propellant  consumption  of  the  thrusters  devoted  to  the  position  and  velocity 
control,  due  to  the  improper  matching  between  the  minimum  control  impulse  and  ihe  narrow  band 
adopted  on  the  phase  plane. 

Fig.  17  represents  the  in-plane  flight  path.  The  out-of-plane  path  is  quite  similar  due  to  the  same 
initial  conditions  assumed  for  the  simulation. 

Fig.  18  shows  the  velocity  profile,  y  as  a  function  of  the  time.  Fig.s  19-20  evidence  its  oscillations 
in  detail. 

It  can  be  observed  that  the  position-velocity  control  frequency  is  increased.  The  control  is  not  able 
to  maintain  the^  chaser  within  the  ON-OFF  boundaries  but,  due  to  the  minimum  impulse  level  too  high, 
drives  the  (X,  X)  point  in  the  phase  plane,  al  t.ernatively  I'rom  a  uid"'  to  the  other,  out  of  the  ON-OFF 
boundary . 

The  ..,iitrul  IS  always  u  king  with  a  sensible  increase  of  the  propellant,  consumption,  beir';j  m  -  2.623  kg 
The  prope’ ’.ant  for  the  attitude  control  is  increased  to  m  -  10.5  g.  Fig.  21  shows  as  an  example  the 
increased  control  frequency  V  ^  32  pulses  in  140  seconds  ?or  the  attitude  angle  w  . 


7  -  CONCLUSIONS 

This  paper  points  out  .some  problems  inherent  to  the  RV  mnnoeuver,  it  evidentiates  that  the  measurement 
errors  depend  on  the  chaser  and  target  status,  so  that  the  intrinsic  sensor  errors  can.iOt  be  considered 
the  maximum  ones.  Whilst  the  attitude  measure  error  shows  a  light  variability,  instead  the  position 
and  velocity  ones  are  str<5ngly  variable.  Simulations  show  the  importance  of  a  good  matching  between 
the  sensor  accuracy  and  the  minimum  impulse  level  of  the  actuation  system  in  order  to  avoid  a  continuous 
oscillation  in  attitude  of  the  spacecraft  and  an  unacceptable  propellant  consumpt i i)n . 

The  simulations  presented  in  this  paper  are  not  exhaustive  with  all  the  d  i  s  t.urbance  erfects  during 
a  RV  manoeuver.  Nevertheless  parametric  nature  of  the  developed  software  allows  the  i  nt  rndur  t  i  on  <->r 
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Fig.1  Layout  of  the  chaser  spacecraft 


Fig. 2  Inertial  reference  frame 


Fig. 3  Chaser  fixed  reference 
frame 


p  =  CHASCB  radial  DiSTAnCC  FROM  THE  TARGET 
p  •  CHASER  radial  VELOCiTr 


Fig. 4  Phase  plane ( f ,^ ) diagram 
position  control 


Fig.'i  Collision  course 

T: target  C: chaser 
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Flq.13  Behaviour  of  the  4>  Euler  angle 

during  the  tline(0.2Ns  Impulse  level) 


Fig. 19  Detail  of  the  y  oscillation 

during  the  time  (particular  a) 


Fig. 20  Detail  of  the  y  oscillation 

during  the  time (particular  b) 


CONTROL  ASPECTS  AS  ELABORATED  IN 
SPACE  RENDEZVOUS  SIMULATIONS 
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1.  INTRODUCTION 

With  the  dawn  of  the  operational  phase  of  the  American  Space  Shuttle  System,  as  well  as  of  the  European  Ariane 
Satellite  Launcher,  the  search  for  the  technological  needs  of  tomorrow,  in  space,  has  been  intensified. 

■?^^jpr  the  last  few  years,  the  European  Space  Agency  been  sponsoring  an  increasing  system  and 

technology  study  effort  related  to  in-orbit  operations,  covering  -  in  particular  -  the  performance  of^^endezvous  and 
Docking^be tween  two  spacecraft.  These  two  spacecraft,  the  one  actively  doing  the  rendezvous,  the  other  passively 
V  h  ^waitir^we  hereafter  term  the  chaser  and  its  target,  respectively. 

^Unlike  the  US  missions,  RVD  here  is  supposed  to  be  done  without  any  man  in  space.  The  chaser  does  its  operations 
to  some  extent  automatically,  having  on  board  the  degree  of  autonomy  needed. 

Otherwise,  it  is  steered  from  the  ground  by  real-time  or  time  tagged  commands  depending  upon  the  contact 
opportunities. 

2.  STUDIES  APPLIED 

To  set  the  stage,  let  us  begin  with  the  scope  of  subjects  to  which  the  reported  programme  was  applied. 

Figure  1  compiles  the  main  Rendezvous  and  Docking  (RVD)  related  missions,  studied  by  Industry  for  ESA.  Covered 
are  flights  on 


-  circular  low  earth  orbits 

-  the  elliptical  geostationary 
transfer  orbit 

-  the  circular  geostationary 
orbit  itself 


RVD  in  LEO 


RVD  in  GTO 


RVD  in  GEO 


The  objectives  of  the  missions  were  assumed  to  be  different,  such  as 

-  flight  demonstration  of  RCD  capabilities  in  LEO 

-  or  assembly  of  a  communication  platform  in  GEO 

The  launcher  involved  as  earth-to-orbit  transport  vehicle  were  either  the 

-  Shuttle  for  LEO 
Ariane  for  GTO  and  GEO 

Also  the  spacecraft  participating  in  the  rendezvous  process 

the  target  and  the  chaser  were  assumed  to  be  different  per  studied  mission. 

Of  major  relevance  for  the  simulation  programme  were  the  different  orbits,  the  requirements  and  constraints  due 
to  the  mission  specific  objective,  and  the  spacecraft  characteristics. 
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Let  us  recall  here  that  in  general  we  divide  the  Rendezvous  (RV)  process  into  the  following  three  pha.ses: 
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The  Guided  Phase 


The  Homing  Phase 


during  which  the  chaser  is  fully  steered  from  the  ground  to  an  acquisition  range 
from  the  target, 

during  which  the  chaser  aims  at  an  arrival  in  the  close  vicinity  of  the  target. 


Final  Approach 


when  final  arrival  conditions,  e.g.  for  docking,  are  achieved. 


The  first  phase  is  handled  with  conventional  techniques  and  therefore  is  not  treated  here.  The  same  applies  to 
homing  ~  provided  it  is  again  guided  from  the  ground.  Of  prime  interest  is  hence  final  approach  (FA). 


3.  THE  PROGRAMME  STRUCTURE 


Although  a  complete  RVD  simulation  programme  must  incorporate  guidance  of  the  chaser  motion  along  its  flivhi 
path  as  well  as  attitude  control  of  both  S/C,  modelling  of  the  sensors  and  thrusters  inclusive  of  signal  and  command  error 
modelling,  the  programme  presented  here  is  restricted  to  the  guided  and  non-guided  motion  of  the  chaser  relative  to  the 
target  without  attitude  control  and  error  modelling.  Thus,  the  S/C  is  considered  to  be  a  mass  point,  with  its  thrusters 
ideally  oriented. 


'  .  ■-•s'. 


A  brief  description  of  the  structure  of  the  discussed  FA  simulation  programme  is  given  in  Figure  2. 

Input  data,  such  as  the  orbital  data  or  the  initial  relative  state,  are  fed  into  the  programme  managing  part,  which 
activates  numerical  integration  routines. 


The  latter  incorporate  differential  equations  of  the  chaser’s  motion  relative  to  the  target,  as  well  as  those  describing 
the  absolute  motion  of  the  target  itself.  Thus  the  programme  simulates  the  navigational  use  of  relative  measurements, 
as  could  be  done  from  on  board,  one  of  the  spacecraft  having  direct  viewing  or  radio  frequency  contact  with  the  other 
one. 

The  routines  used  are  built-up  according  to  the  different  control  modes  which,  in  turn,  make  up  the  desired 
rendezvous  strategy  and  are  steered  by  the  appropriate  control  parameters  included  in  the  input  data. 

Such  control  modes,  per  strategy,  are  listed  in  Figure  3. 

In  principle  it  is  applicable  for  the  homing  phase  and  for  final  approach  as  well  as  for  some  last-minute  abort 
manoeuvre. 

The  programme  simulates  the 

-  proportional  navigation  scheme,  or  constant  bearing  type  of  approach, 

-  pursuit  course  scheme,  or  variable  bearing  type  of  approach, 

-  combined  schemes,  with  the  above  two  in  sequence. 

But  the  programme  also  can  simulate 

-  non-guided,  free  drifting  fly-by  and 

-  emergency  manoeuvre  to  avoid  collision. 

The  most  important  input  data  are  shown  in  Figure  4.  These  obviously  include 

-  spacecraft  data 

-  orbital  data 

-  directives  concerning  selected  strategy  and 

-  control  parameters  which  finally  determine  the  profile  of  the  rendezvous  process. 

How  they  are  involved  in  the  simulation  process  is  shown  in  Figure  5  in  a  simplified  form.  It  deals  with  one  control 
mode,  namely  with  the  braking  manoeuvre  of  the  chaser  along  its  line-of-sight  to  the  target. 

This  manoeuvre  consists  of  the  simultaneous  reduction  of  range  and  range  rate,  to  any  specified  value  at  a  specified 
aiming  point.  Thus  its  simulation  is  comprised  of  the  following: 

-  Orbital  motion  of  the  target  with  respect  to  an  earth  centered  inertial  reference  frame  on  one  hand,  and  orbit 
dynamics  of  the  chaser’s  relative  motion  to  the  target  using  coordinates  of  a  target  centered  inertial  reference 
frame  on  the  other  hand. 

-  Transformation  of  relative  Carthesian  state  variables  into  corresponding  polar  or  spherical  state  variables. 
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-  Generation  of  control  variables.  Whilst  the  previous  two  “boxes”  on  the  riglit  hand  side  are  common  to  all 
modes,  the  control  variables  are  specific  to  each  mode.  In  the  case  shown  only  one  control  variable  “Al)"  is 
necessary,  representing  the  required  axial  deceleration  to  achieve  final  range  rate  at  a  range  "Hi.”. 

-  Finally  a  switching  controller  of  an  hysteresis  type  which  steers  the  thrusting  within  specified  tolerance  values. 
These  thrustings,  in  turn,  are  fed  back  into  the  chaser  dynamics,  i.e.  into  the  corresponding  differential 
equations. 


4.  CONTROL  OF  FINAL  APPROACH 

Coming  now  to  some  output  of  the  subject  simulation  programme,  it  is  obvious  that  within  the  limited  time 
available,  only  very  few  results  can  be  shown  or  discussed. 

So  let  us  pick  out  merely  two  cases  out  of  the  final  approach  phase: 

First  -  the  mode  of  braking  the  chaser’s  approach  towards  the  target,  by  axial  thrusting  along  the  line-of  sight 
(LOS).  This  is  the  main  part  of  the  proportional  navigation  scheme,  after  rotation  of  LOS  has  been 
nearly  brought  to  a  stop. 

When  retaining  this  mode  up  to  docking,  a  coo(>erative  target  spacecraft,  in  terms  of  orientation  of  its 
docking  axis  along  the  final  LOS,  is  assumed. 

Secondly  -  the  m(.uj  of  rotating  the  LOS  through  a  specified  angle,  e.g.  at  constant  range  from  the  target:  this 
amounts  to  a  chaser  flight  around  the  latter.  This  is  necessary  in  case  the  direction  of  approach  is  not 
coincident  with  the  docking  axis  of  a  fixed  oriented  target  spacecraft. 

For  a  very  time-limited  discussion  of  results,  their  illustration  in  a  so-called  “phase  diagram”  has  proven  itself  most 
effective.  It  is  a  diagram  showing  range  rate  versus  range. 

Thus,  in  the  first  case  discussed,  the  chaser’s  approach  velocity  is  decreased  as  a  function  of  its  range  from  the 
target,  Figure  6.  This  is  done  by  using  the  comparison  of  necessary  decelerations  with  achievable  ones  as  criteria  for 
switching  the  thrusters  on  and  off.  The  necessary  magnitudes  represent  boundaries  of  control  channels  and  appear  in 
the  phase  diagram  -  when  defined  as  indicated  -  as  parabolas. 

It  has  been  repeatedly  confirmed  that  this  method  of  controlling  the  braking  impulses  is  convenient,  flexible  and 
efficient;  care  must  be  taken  only  to  select  the  coefficients  of  the  parabolas  so  as  to 

-  be  compatible  with  the  state  vector  (R,  ft)  of  the  chaser  at  the  initiation  of  the  process, 

-  comply  with  the  decelerations  achievable  by  means  of  the  thrust  levels  on  board  the  chaser, 

-  result  in  the  desired  final  values  of  R  and  ft. 

Figure  7  shows  a  concrete  case  of  approach  to  a  target  satellite  flying  on  GTO  at  about  a  true  anomaly  of  1 50°, 
the  chaser  being  on  a  nearby  orbit  starting  its  proportional  navigation  scheme  at  a  distance  of  1000  m  off  the  target. 

Having  identified  the  excess  in  range  rate  at  that  range,  the  approach  velocity  is  steeply  reduced  so  as  to  enter  the 
first  control  channel,  compatible  with  the  400  N  thruster  performance. 

The  intermittent  braking  of  range  rate  continues  inside  the  channel  until  the  second  channel  is  achieved,  which  is 
compatible  with  the  40  N  thrust  level.  The  latter  is  necessary  because  the  thrusting  impulses  get  too  short  for  the  400  N 
to  deliver. 

Here  switching  over  to  the  lower  level  thrusters  takes  place  on  controller’s  command  and  the  approach  velocity  is 
further  reduced  at  a  lower  thrust  level  with  increased  pulse  duration. 

The  dashed  line,  incidentally,  represents  free  drift  with  no  braking  control. 

It  must  be  noted  here  that  the  convergence  of  the  plot  is  no  guarantee  for  clean  docking  conditions.  If  e.g.  LOS 
stability  is  controlled  at  close  proximity  to  the  target  based  on  its  angular  displacement  rate,  a  chaser  drifting  around 
the  target,  with  the  risk  of  hitting  it  on  the  side,  may  occur.  Therefore,  a  switch-over  to  LOS  control  based  on  lateral 
displacement,  which  we  do  at  a  range  of  about  200  m,  is  highly  recommended. 

As  can  be  expected,  the  initial  conditions  of  the  chaser  relative  to  the  target  are  of  importance. 

Figure  8  shows  for  a  circular  550  km  target  orbit  the  relatively  slow  approach  of  the  chaser,  it  being  about  1  km 
lower. 

Doing  nothing  would  cause  the  chaser  to  overtake  the  target  at  a  range  of  1000  m  (dotted  line)  not  achieving 
docking  conditions. 
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Thus,  an  acceleration  towards  the  target  is  necessary;  the  effects  of  this  acceleration  up  to  different  range  rate 
levels  is  shown  in  comparison. 

Accelerating  up  to 

-  1  m/s  (long  dashed  line)  seems  inadequate,  as  the  duration  of  approach  becomes  very  long.  1  he  calculation 

was  interrupted  after  about  1  hour  flight  equivalent  time.  So  we  don’t  know  whether  docking  could 
be  accomplished. 

-  2  m/s  (full  line)  results  in  docking  conditions,  smoothly  achieved  within  the  40  N  thrust  control  channel. 

-  4  m/s  (short  dashed  line)  was  too  much  to  regain  control  of  range  rate,  resulting  in  collision  with  au  impact 

speed  of  0,8  m/s. 

This  leads  us  to  the  possibility  of  simulating  an  abort  of  the  final  approach. 

Figure  9  shows,  on  the  left  side,  the  case  where  the  low  thrust  control  channel,  either  intentionally  or  contingency- 
wise,  has  been  suppressed.  Leaving  the  high  thrust  channel,  the  chaser’s  controller  allows  free  tlight  until  a  certain 
critical  range,  that  is  closest  to  the  target,  at  which  lateral  thrust  is  still  possible  so  as  to  result  in  a  last  minute  circum¬ 
venting  of  the  target. 

On  the  right  side,  both  control  channels  are  assumed  to  be  out  of  function.  Here  again,  the  controller  determines 
the  last  opportunity  to  avoid  collision  and  therefore  commands  full  braking  and  lateral  thrust. 

Finally,  the  case  of  rotating  LOS,  in  terms  of  circum-flying  the  target,  is  shown  in  Figure  1 0.  Here,  range  is  kept 
constant  during  this  manoeuvre.  To  this  end,  again,  control  channels  are  defined,  representing,  however,  lateral  decelera¬ 
tion  limits  within  which  the  lateral  thrustings  take  place. 

Figure  1 1  shows  at  the  left  upper  comer  the  effect  of  this  rotation  on  the  phase  diagram  plot.  The  rotation  itself 
is,  in  fact,  the  single  point  on  the  R  =  O  axis.  The  local  vertical,  there,  indicates  the  re-acceleration  towards  the  target, 
needed  for  completion  of  the  approach  after  the  rotation  manoeuvre.  It  can  be  seen  that  -  again  -  the  level  of  this  re¬ 
acceleration  is  not  totally  arbitrary,  but  rather  must  suit  the  available  thrust  level  channel.  Otherwise  either  a  fly-by  or 
a  collision  may  occur. 


5.  A  FEW  CONCLUSIONS 

Because  of  lack  of  time  we  end  with  only  3  conclusions: 

•  The  selected  guidance  schemes  have  been  proven  to  be  effective  and  realistic.  Other  optimum  guidance 
schemes  involve  excessive  complexity  in  on-board  data  processing,  hardware  and  software  implementation. 

•  On  high  orbits  the  constant-bearing  type  approach,  as  well  as  the  variable-bearing  type,  are  rather  unproblematic 
in  achieving  successful  rendezvous. 

•  The  orbit  curvature,  with  decreasing  orbit  altitude  turns  out  to  increasingly  impede  smooth  rendezvous, 

—  often  requiring  additional  velocity  stabilization  control  during  proportional  navigation, 

-  rendering  the  pursuit  course  strategy  inapplicable  unless  high  thrust  levels  are  available. 


14-5 


FIG.  l! 


EUROPEAN  SPACE  AGENCY  (ESA)  SPONSORED  RENDEZVOUS  S  DOCKING  (RVD)  STUDIES 


MISSION 

RVO-  IN-LEO 

RVD-IN-GTO 

RVD- IN-GEO 

OBJECTIVE 

FLIGHT  DEMONSTRATION 

OF  RVO  CAPACITY 

AHACHING  APOGEE  PRO¬ 
PULSION  MODULE  TO 
COW-SAT  PRIOR  TO 
INJECTION  INTO  GEO 

ASSEMBLY  OF  MODULAR¬ 
IZED  GEO  COWUNICA- 
TION  PLATFORM 

INVOLVED 

LAUNCHER 

SHUTTLE 

ARIANE  3 

ARIANE  4 

TARGET  ORBIT 

ALTITUDE 

300  KM  CIRCULAR 

550  KM  CIRCULAR 

200/36000  KM 

36000  KM  CIRCULAR 

RVD  TARGET 

VEHICLE 

'EURECA*  RETRIEVABLE. 
FREE  FLYING.  PAYLOAD 
CARRYING  PLATFORM 

200  KG 

COWUNICATION  SATELLITE 
WITH  NO  APOGEE  MOTOR 

MODULARIZED  GEO  COM¬ 
MUNICATION  PLATFORM 
BEING  BUILT  UP 

RVO  CHASER 

VEHICLE 

DEDICATED,  SPECIALLY 
LAID  OUT  TEST 

VEHICLE 

dedicated,  AMPTED 
APOGEE  PROPULSION 

MODULE 

COWUNICATION  PAYLOAD 
MODULE  WITH  AHACHED 
PROPULSION  KIT 

FIG.  2: 

THE  RENDEZVOUS  SIMULATION  PROGRAWC  STRUCTURE 


^  •  •  •  - 


if 

>'1 

i>^i| 


ItrUT  DATA: 

-INITIAL  CONDITIONS 
-CONTROL  PARAMETERS 
-ORBITAL  PARAMETERS 
-SNITCHES 

INPUT  TO  INTEGRATION  ROUTINE: 
ESTABLISIWENT  OF 
DIFFERENTIAL  EQUATIONS 
OF 

REIATIVE  MOTION 


BRAKIN6  OF  LOS  ROTATION 


KEEP  ACTUAL  LOS  WITHIN  SPECIFIED 
OFFSET  MUiOINS  FROM  INERTIALLT 
FIXED  LOS 


BRAKING  MANOEUVRE  ALONG  LOS 
TO  REDUCE  RANGE  >  RANGE  RATE  TO 
ZERO  AT  SPECIFIED  AIMING  POINT 


ROTATE  LOS  AT  VARIABLE  OR 
CONSTANT  RANGE  TO  ALINE  LOS 
WITH  TARGH  DA 


PROGRAM 

WUWGEKNT 


INTEGRATION  ROUTINE 


COmON  LINK 
ffPE 

RELEVANT 

DATA 

ON  SCREEN 


DOCUKNTATION  OF 
INITIAL  VALUES. 
PARAMETERS.  FINAL  VAL. 


OUTPUT  DATA: _ 

^  -ACTUAL  STATE  VECTOR 
“  -CONTROLLED  VARIABLES 
^  -STATUS  INDICATORS 


-SELECTION  OF 
DIFFERENT  STRATEGIES 
-COORDINATION  OF 
DIFFERENT  CONTROL 
MODES  AND  SCHEMES 


RE-ACCELERATION  AND  BRAKING  UP 
TO  DOCKING  INITIATION  POINT 
AFTER  LOS  ROT.  MANOEUVRE 


CONTROL  OF  DOCKING  VELOCITY 
UP  TO  PHYSICAL  CONTACT 


TRY  A  TARGET  FLY-BY  IF  SAFE 
BRAKING  FAILS  (TOO  HIGH  RANGE 
RATE  WITH  RESPECT  TO  RANGE) 


. .  An 


FIG.  3; 


CAPABILiriES  OF  THE  SIMULATION  PROGRAMft 


CONSTANT  BEARING  FINAL  APPROACH 

i.e.  PROPORTIONAL  NAVIGATION  (PN) 

0  BRAKING  OF  LOS  ROTATION 

0  HOLDING  LOS  INERTIALLY  FIXED 

0  BRAKING  RANGE  RATE  ALONG  LOS 

0  KEEPING  CLOSING  SPEED  CONSTANT 

VARIABLE  BEARING  FINAL  APPROACH 

i.e.  PURSUIT  COURSE  (PC) 

0  BRAKING  RANGE  RATE  ALONG  LOS 

0  CONTROLLING  ROTATION  OF  LOS 

0  CONTROLLING  RANGE  RATE 

0  HOLDING  LOS  INERTIALLY  FIXED 

0  KEEPING  CLOSING  SPEED  CONSTANT 

COMBINED  NODE  OF  FINAL  APPROACH 

WITH  PN  AND  PC  IN  SEQUENCE 

COMBINATION  OF  ABOVE 

CONSTANT  BEARING  HOMING 

0  RETAIN  CONSTANT  RANGE  RATE 

0  CONTROLLING  LOS  ROTATION 

EMERGENCY  LAST  MINUTE  ABORT 

0  CHECK  RANGE  RATE  VS.  RANGE 

0  PREDICT  RELATIVE  ORBITAL  STATE  AT  ITP 

o  ATTEMPT  OF  HOLD  OR  FLY-BY 

FIS.  4  ; 

INPUTS  AND  CONTROL  MA6N1TUES 


SPACECRAFT  DATA 


TARGET  - 

DOCKING  AXIS  ORIENTATION 

CHASER  - 

INITIAL  MASS 

ORIENTATION 

- 

THRUSTER 

. 

THRUST  LEVELS 

- 

SPECIFIC  IMPULSES 

DOCKING  AXIS  ORIENTATION 

ORBITAL  DATA 


TARGET  ORBIT  ELEMENTS 
INITIAL  RELATIVE  STATE  VECTOR 


RENDEZVOUS  STRATEGY 


SELECTED  NOOES/SEQUENCE 
IN-BETHEEN  WAITING  TINES 
DOCKING  VELOCITY 


RENDEZVOUS  PROFILE 

CONTROL  CHANNELS 

- 

THRUST  WEIGHING 
FACTORS 

FINAL  RANGE 

- 

FINAL  RANGE  RATE 

LINE-0F-SI6HT  (LOS) 

ROTATION  ANGLE 

- 

ROTATION  RATE 

ROTATION  THRESHOLDS 

- 

OFFSET  BOUNDARIES 

RANGE 

OF  LOS  ANGULAR  RATE- 
TO-LATERAL  OFFSET 
CONTROL  SWITCH  OVER 

- 

OF  LOS  ROTATION 
MANOEUVRE 

RANGE  RATE 

- 

LOWER  LIMIT  OF  RANGE 
RATE 

DEVIATION  FROM 
DOCKING  AXIS 

LATERAL  LIMITS 

ANGULAR  LIMITS 

h’ 


MODE 


CHASER  BRAKING  ALONG  LOS 


pDoce-nu^e- 

lu  THE  A !  a  PLOWS' 

lift  »OlT  CJfJPJ  ■  ba/vr) 

i 


XVi 


ftltMT 
it  HBCTtOM 


TPPSer 


A  (Auxoe) 


F/vB 

With  e  S  V  Torai  Tk»u/ 


Lot  _ T^"- 

~1~ ( i  &  “ 


MAAJrlHA  TH^U‘T  CPireAlOU- 


(A -»e)  2. 

IcJ^J  ~  rib 


>  tb.  hi 


/?£■  »  ftlHet  /tfikQE 

Ve  s  Ji^f^ce  P/fre 

Me  *  Of  CHPtffK 

T/tx  •  Full  pxiPi  Thpust  CPPPCtrr 


FIG,  7; 


TWO-LEVEL-THRUST  APPROACH  IN  m  PHASE  DIAGRAMME 
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FINAL  APPROACH  WITH  LOS  ROTATION 


OPTIMISATION  DES  MANOEUVRES  D’UN  SATELLITE  D’OBSERVATION 
EN  VUE  D’UN  SURVOL  RAPIDE  D’UN  POINT  DU  GLOBE 


A.M.Mainguy,  C.Aumasson  et  S.Laffy 
ONERA 
B.P.72 

92322  Chatillon  Cedex 
France 


Un  satellite  d’observation  de  la  Terre  est  place  de  faijon  nominale  sur  une  orbite  de  surveillance  quasi  polaire 
(heliosynchrone)  circulaire  et  d’altitude  telle  que  I’entrelacement  des  traces  au  sol  soit  suffisamnient  regulier  et  serre. 
Ceci  assure  une  converture  convenable  du  globe  terrestre  sur  one  periode  de  quelques  jours. 


Pour  des  raisons  de  haute  surveillance,  il  peut  s’av6rer  necessaire  de  modifier  cette  orbite  et  de  placer  la  satellite 
sur  une  orbite  circulaire  “geosynchrone”  permettant  d’observer  un  point  precis  du  globe  de  fafon  repetitive  une  fois  par 
jour  et  pendant  un  temps  donne.  Cette  manoeuvre  doit  etre  effectuee  le  plus  rapidement  possible,  en  moins  de  deux 
jours,  par  exemple.  Les  deux  orbites  etant  d’altitudes  voisines,  il  est  possible  de  s’affranchir  du  maintien  de  la  contrainte 
d’heliosynchronisme  et  de  resoudre  le  probleme  en  supposant  les  deux  orbites  de  meme  inclinaison. 

La  difficulte  du  probleme  reside  dans  le  fait  que  la  manoeuvre  doit  etre  effectuee  sur  une  courte  duree  de  temps 
avec  des  reservoirs  de  capacity  limitee  et  des  propulseurs  a  faible  niveau  de  poussee,  II  faut  proceder  par  etapes  pour 
pouvoir  resoudre  le  probleme  dans  sa  generalite. 
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Une  premiere  etude  est  faite  avec  des  hypotheses  simplificatrices  portant  a  la  fois  sur  les  contraintes  physiques 
(poussee  impulsionnelle)  et  sur  les  equations  mathematiques  (linearisation  des  equations  ai'.tour  de  I'orbite  nominale). 

II  est  ainsi  possible  de  construire  analytiquement  les  solutions  optimales  ou  sous  optimales  (a  poussee  tangente)  et 
d’evaluer  les  ordres  de  grandeur  des  cou  ts  des  manoeuvres,  en  fonction  de  la  position  du  point  survoie  et  du  temps 
disponible  pour  realiser  I’objectif.  Dans  le  cas  de  duree  assez  longue,  le  cout  est  legerement  superieur  a  celui  d’un  simple 
transfer!  sur  orbite  geosynchrone.  Mais  pour  des  durees  plus  courtes,  le  cout  du  rendez-vous  devient  considerable,  les 
accroissements  de  vitesse  a  fournir  ne  peuvent  plus  etre  deiivres  dans  une  duree  compatible  avec  I’approximation 
impulsionnelle  et  dans  certains  cas  conduisent  a  une  consummation  deposant  la  capacite  maximale  des  reservoirs.  Malgre 
la  relative  proximite  des  orbites  initiale  et  finale,  les  orbites  intermediates  sont  significativement  differentes.  En 
consequence,  les  hypotheses  simplificatrices  ne  sont  plus  valables. 

Une  deuxieme  etude  s’appuie  sur  des  hypotheses  plus  realistes,  en  prenant  en  compte  le  faible  niveau  de  poussee, 
et  done  I’etalement  des  arcs  propulses.  En  supposant  encore  les  equations  d’evolution  linearisees  et  la  poussee  tangente, 
le  probleme  se  presente  comme  un  probleme  d’optimisation  parametrique  avec  contraintes,  dont  les  inconnues  sont  les 
instants  d’allumage  et  d’extinction  des  moteurs.  II  ne  peut  etre  resolu  qu’en  utilisant  un  algorithme  numerique  iteratif 
mais  il  apparait  alors  une  difficulte  liee  a  I'initialisation  de  la  methode.  En  effet,  une  simple  transcription  des  resultats 
de  la  premiere  etude  ne  permet  pas  toujours  d’aboutir  d  une  convergence  satisfaisante  de  I’algorithme;  une  methode 
originale  d’initialisation  recursive  a  ete  developpee.  Les  resultats  obtenus  permettent  de  mettre  en  evidence  la  degrada¬ 
tion  du  coiit  en  fonction  de  I’etalement,  d’autant  plus  importante  que  le  cout  lui-meme  est  eieve.  Independamment  de 
la  capacite  maximale  des  reservoirs,  certains  points  sont  meme  impossibles  a  survoler  dans  un  bref  delai,  car  I’etalement 
des  arcs  de  poussee  est  trop  grand,  et  impossible  a  repartir  sur  le  nombre  de  tours  disponible  pour  le  survol  des  points 
(les  points  limites  du  domaine  accessible  sont  associes  i  une  poussee  ininterrompue).  Une  premiere  approche  des 
manoeuvres  realisables  a  ainsi  ete  obtenue,  mais  ce  n’est  qu’une  approche  puisque  les  equations  du  mouvement  ont  ete 
simplifiees. 

Une  troisieme  etude  permet  J’aborder  le  probleme  reel  sans  simplification.  II  s’agit  d’une  optimisation  fonctionnellc 
ou  les  commandes  a  determiner  sont  le  module  de  la  poussee  et  son  orientation  dans  le  repere  orbital  local.  La  methode 
numerique  iterative  utilisee  est  plus  complexe  que  la  precedente  quoique  basee  sur  le  meme  principe.  II  a  ete  verifie  que 
la  methode  converge  meme  lorsque  I’initialisation  est  effectuee  avec  une  poussee  identiquement  nulle  et  vers  une  solution 
de  type  tout  ou  rien,  compatible  avec  le  principe  du  maximum  de  Pontryagin.  Ceci  a  permis  de  verifier  le  bon  ordre  de 
grandeur  obtenu  dans  le  cadre  de  I’etude  precedente  et  de  reajusler  les  instants  d’allumage  et  d’extinetion  des  moteurs. 

La  possibilite  d’optimiser  egalement  I’orientation  de  la  poussee  montre  que  la  poussee  tangentielle  est  quasi  optimale 
sauf  pour  des  survols  effectues  en  moins  de  2  tours  oii  la  poussee  liba'inent  orientable  peut  s’averer  interessante. 


.  *  ■  .  'at '  ■ 

■ 


I  iiM  tniin'l 


vS:<- 

*  •  •  •  •  ■ 

.  .'-j. 


m  n  '  • 


.*• 


AN  APPROACH  TO  ATTITUDE  CONTROL  MANEUVERS 
WHICH  HELPS  MAINTAIN  ORBIT  INCLINATION 


Dr.  W.  Michael  Bowles 
Senior  Scientist 

and 

Mark  R.  Altobelli 
Technical  Staff 

Space  and  Communications  Group 
Hughes  Aircraft  Company 
El  Segundo,  CA 


HUGHES  PROPRIETAHY 

tocuin*M  eonUln*  prepftctcry  inlwmation  «nd  Mccpl  with  wrttl*A  parmiMlon  ol 
HughM  Aircr«t1  C«npany.  awch  in<omijtton  tlwtl  not  bt  tuOllihotf.  or  ditckMod  to  olhon. 
or  uooO  tor  «ny  b^KpoM.  *<*4  (ho  documont  «haH  rtol  bo  dupttcoiod  to  whoto  or  in  port 


I .  INTRODUCTION 

\\ 

J  The  procedure  described  here  is  useful  for  a  spin  stabilized  satellite  spinning 
around  an  axis  normal  to  its  orbit  plane  and  using  an  offset  axial  thruster  for  attitude 
control.  For  such  a  satellite,  the  procedure  arranges  attitude  control  maneuvers  so  that 
such  maneuvers  help  maintain  orbit  inclination. 


The  important  features  of  the  satellite  are  that  it  spins  with  its  spin  axis  normal 
to  the  orbit  plane  and  it  uses  offset  axial  thrusters  to  control  attitude  and  to  impart 
velocity  along  the  spin  axis.  -This  eonfiguration  is  sketched  in  Figure  1.  Both  axial 
thrusters  are  fired  simultaneously  to  impart  a  velocity  along  the  spin  axis.  To  alter  the 


Figure  1.  Spinning  Satellite  Using  Offset  Axial  Thrusters 

spin  axis  attitude  one  thruster  is  pulsed.  If  the  pulse  is  short  enough  that  the  satellite 
does  not  rotate  through  a  very  large  angle,  then  the  effect  is  to  apply  an  external  torque 
to  the  satellite  and  thus  to  precess  the  spin  axis.  By  repeatedly  pulsing  the  thruster  the 
spin  axis  can  be  precessed  by  any  desired  amount.  This  manner  of  achieving  a  spin  axis  re¬ 
orientation  also  results  in  a  velocity  change  in  the  spin  axis  direction.  The  object  is  to 
make  sure  that  whenever  it  is  necessary  to  reorient  the  spin  axis,  the  reorientation  can  be 
done  so  that  the  attendant  velocity  change  is  also  helpful. 

A  satellite  in  a  circular  orbit  will  not  remain  in  that  orbit  indefinitely  if  left 
alone.  Among  other  changes  that  the  orbit  undergoes,  it  tilts  relative  to  the  starting 
orbit.  In  order  to  stay  close  to  a  desired  orbit  the  accumulated  tilt  must  be  corrected  out 
periodically.  Figure  2  helps  indicate  how  the  orbit  tilt  correction  may  be  carried  out. 

When  the  satellite  in  its  tilted  orbit  crosses  the  desired  orbit  going  down,  a  velocity 
change  is  introduced  normal  to  the  orbit.  This  swings  the  velocity  vector  for  the  satellite 
from  that  connected  with  the  tilted  orbit  to  that  appropriate  for  the  desired  orbit. 

Besides  not  remaining  in  a  fixed  circular  orbit  a  satellite  will  not  hold  a  fixed  atti¬ 
tude.  The  attitude  drifts  principally  to  the  influence  of  solar  torque.  For  a  spinning 
satellite,  solar  torque  results  in  a  precession  of  the  satellite  around  the  line  between 
the  satellite  and  the  sun.  Periodically,  the  attitude  must  be  corrected. 

On  the  spinning  satellite  with  offset  axial  thrusters,  altering  attitude  also  imparts 
some  velocity  normal  to  the  orbit.  If  all  the  attitude  trim  maneuvers  are  done  at  the 
descending  node,  then  the  axial  velocity  tends  to  help  maintain  orbit  inclination. 


Tilted  orbit 


Ascending  node 


Figure  2.  Geometry  of  Orbit  Tilt  Correction 

In  some  instances  it  is  not  possible  to  do  all  of  the  attitude  control  maneuvers  at  the 
descending  node.  In  particular,  when  the  precession  rate  gets  so  large  that  the  precession 
accumulated  in  one  day  exceeds  the  bounds  of  acceptable  pointing  for  the  satellite  spin  axis, 
then  it  is  not  possible  to  wait  for  one  day  between  maneuvers.  How  to  arrange  the  attitude 
control  maneuvers  in  this  case  is  the  subject  of  this  paper. 

II.  DESCRIPTION  OF  SOLUTIONS 

The  problem  is  to  determine  an  optimum  strategy  for  performing  attitude  control  maneuver 
when  the  combination  of  pointing  tolerance  and  precession  rate  force  corrections  to  be  made 
more  often  than  once  per  day.  An  optimum  strategy  is  one  which  maintains  spin  axis  attitude 
within  acceptable  bounds  and  which  arranges  attitude  control  maneuvers  in  such  a  way  as  to 
achieve  the  greatest  beneficial  effect  on  orbit  inclination.  The  optimum  strategy  can  be 
found  through  intuitive  argument  and  more  rigorous  proof  of  optimality  follows  the  intuitive 
argument  quite  closely. 

These  are  two  state  variables  of  interest  here.  One  is  the  angle  of  rotation  of  the 
satellite  around  the  line  from  the  satellite  to  the  sun.  This  angle  will  be  denoted  by  Or* 
Orbit  normal  will  be  0^.  =  0.  The  other  is  the  angle  of  the  satellite  in  its  orbit.  Let 
9(j  denote  the  angle  between  a  line  from  the  earth's  center  to  the  ascending  node  of  the 
orbit  and  a  line  from  the  earth's  center  to  the  satellite. 

The  sequence  of  plots  shown  in  Figure  3  will  help  explain  the  strategy  for  optimizing 
attitude  control  maneuvers.  Suppose  first  that  there  is  no  restriction  on  the  excursion  for 
the  spin  axis.  Figure  3a  shows  how  the  attitude  0^  would  behave  as  a  function  of  the  satel¬ 
lite's  position  in  orbit  0g  if  all  the  corrections  were  done  at  the  descending  node.  In 
this  case  the  attitude  starts  from  zero,  suppose,  and  increases  until  the  descending  node  is 
reached.  At  that  point  a  correction  equal  to  the  daily  precession  rase  is  introduced.  Until 
the  next  passage  through  the  descending  node,  the  attitude  is  allowed  to  drift.  Suppose  now 
that  the  attitude  cannot  be  allowed  to  drift  for  an  entire  day.  Suppose  that  the  precession 
in  one  orbit  is  B.  Suppose  also  that  to  ensure  proper  performance  of  the  satellite,  the 
rotation  of  the  spin  axis  around  the  sun  line  must  be  constrained  to  within  ±  S  of  orbit 
normal.  Figure  3b  shows  a  strategy  for  performing  attitude  control  maneuvers  whick  keeps 
l®rl^'5  for  the  case  where  i  =  B/4 .  In  Figure  3b  the  attitude  begins  at  zero.  It  cannot  be 
allowed  to  drift  until  the  descending  node  as  was  the  case  in  Figure  3a.  The  upper  bound  on 
the  spin  axis  attitude  deviation  is  reached  at  the  antinode  0^  =  r/2.  Some  correction  must 
be  done  at  @(,  =  w/2.  The  decision  is  made  to  introduce  a  correction  of  B/4.  When  this  is 
done  the  attitude  0j.  will  just  drift  to  the  upper  bound  S  at  the  descending  node  (0(,  =  t)  . 
This  is  a  good  choice  because  it  allows  for  a  correction  of  maximum  size  to  be  done  at  the 
descending  node  and  thus  benefits  orbit  tilt.  The  total  correction  done  during  the  orbit 
must  equal  the  total  precession  during  the  orbit.  It  makes  sense  to  do  as  much  of  this 
correction  as  possible  at  the  descending  node.  The  co.-rections  done  at  the  antinode  cancel 
one  another's  contribution  to  orbit  tilt.  The  efficiency  if  this  strategy  is  then  50%  in 
that  50%  of  the  linear  velocity  imparted  by  the  attitude  control  maneuver  is  helpful  for 
orbit  tilt  correction. 

It  is  possible  for  firings  done  away  from  the  descending  node  to  benefit  orbit  tilt. 
Suppose  that  a  linear  velocity  of  &V  is  imparted  at  orbit  angle  0o.  This  AV  certainly  tilts 
the  orbit  by  some  amount. 

If  a  velocity  change  iV  imparted  in  the  spin  axis  direction  at  the  descending  node  tilts 
the  orbit  plane  in  the  desired  direction  by  a  degrees,  then  AV  imparted  at  orbit  angle  0r, 
degrees  tilts  the  orbit  plane  in  the  desired  direction  by  -  5  cos  0o  degrees .  Attitude 
maneuvers  done  at  the  antinodes  {0o  =  w/2  or  0o  =  3  ii/2)  tilt  the  orbit  in  a  direction 
orthogonal  to  the  direction  in  which  correction  is  required.  Corrections  done  at  the 
ascending  node  make  the  tilt  worse.  It  is  best  if  the  Mttitude  maneuvers  are  gathered 
close  to  the  descending  node. 


Figure  3  Geometry  of  Attitude  Maneuvers 

The  strategy  depicted  in  Figure  3b  can  be  improved  upon  by  using  this  guideline. 
Instead  of  doing  a  maneuver  of  B/4  at  the  antinode  where  the  threshold  5  is  first  reached 
suppose  that  a  maneuver  of  B/8  were  done.  The  threshold  would  be  reached  again  at  ©o  = 

3  ii/4  and  another  maneuver  of  B/8  could  be  done.  A  strategy  following  this  outline  is 
depicted  in  Figure  3c.  The  two  maneuvers  of  B/8  which  have  been  moved  to  ©o  =  n  ±  ii/4 
benefit  orbit  tilt  and  so  the  maneuver  of  Figure  3c  is  an  improvement  over  the  maneuver 
in  Figure  3b. 

The  maneuvers  could  be  further  subdivided  and  in  the  limit  the  result  would  look  like 
the  graph  in  Figure  3d.  In  the  limiting  case  the  strategy  is  to  do  nothing  until  the 
threshold  4  is  hit.  Thereupon,  a  series  of  small  attitude  corrections  is  done.  These 
small  attitude  corrections  just  offset  the  precession  and  the  attitude  offset  remains 
constant  at  S  until  the  descending  node  is  reached.  At  the  descending  node  a  correction 
of  2S  is  introduced.  Past  the  descending  node,  another  series  of  small  corrections  is  done 
These  corrections  hold  the  attitude  at  ©j.  =  -4.  The  attitude  is  at  ©j.  =  4  over  the  same 
angle  prior  to  the  descending  node  as  it  is  at  ©j.  =  -4  after  the  descending  node.  This 
fact  and  the  value  of  the  threshold  4  and  the  precession  rate  B  determine  at  what  angle 
©0  the  firing  ceases  and  the  attitude  begins  to  drift. 

An  efficiency  for  this  strategy  can  be  defined  to  be  the  ratio  of  the  benefit  derived 
by  using  the  strategy  to  the  benefit  achieved  by  doing  the  entire  attitude  control  maneuver 
at  the  descending  node.  To  compute  this  efficiency,  first  recognize  that  the  orbit  angle  a 
through  which  the  satellite  travels  while  the  attitude  orecesses  from  -4  to  +4  satisfies 


In  this  equation  B  is  the  precession  rate  in  radians  of  precession  per  orbit,  a  is  an 
orbit  angle  in  radians  and  4  is  the  allowable  deviation  of  the  attitude  from  orbit  normal. 
According  to  the  strategy  the  satellite  exerts  a  low-level  thrust  which  just  offsets  the 
precession  rate  B/2ir  when  its  orbit  angle  is  between  w  and  2w  -  a/2  or  when  ©j,  is  between 

2it  ^  and  2it  -  2ir  The  benefit  derived  by  this  strategy  is 
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The  integral  term  arises  from  the  low-lev'el  thrusting  and  the  24  term  is  from  the  impulsive 
attitude  change  at  the  descending  node.  If  the  precession  for  an  entire  orbit  were  taken 
out  at  the  descending  node,  then  the  benefit  would  be  B.  The  efficiency  of  the  strategy 
outlined  can  be  defined  as  the  ratio  of  these  two  quantities.  Denote  the  efficiency  by 
E  then 
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Figure  5.  Optimal  Strategy  and  Perturbations 

First,  as  illustrated  in  Figure  5b,  suppose  that  the  attitude  does  not  start  at 
=  0  but  at  Oj.  =  e  where  e  is  a  small  number.  Denote  the  efficiency  for  this  perturbed 
case  by  E'  then  the  change  in  efficiency 
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Consider  the  behavior  of  E'  -  E  as  a  function  of  e.  Denote  this  dependence  by  setting 

g(c)  =  E’  -  E  (7) 

Then  straight  forward  computation  yields 


■  // 
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Since  5/B  1  then  g"(0)  ^  0  and  g"(0)  <0  for  6/B  <  Therefore,  the  effect  of  making 

the  starting  attitude  slightly  different  from  zero  is  to  decrease  the  efficiency  of  the 
maneuver  . 

Next  suppose,  as  shown  in  Figure  5c,  that  the  attitude  is  not  allowed  to  reach  the 
threshold  5  but  is  stopped  at  5  -  e.  In  this  case 
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Again  let  g(e)  =  E'  -  E  then  g(0)  =0  and 


g'(0)  = 


T  .  2ii6\ 

^  1  cos 


In  the  last  case  g'(0)  was  zero  and  g" (0)  was  negative.  This  was  a  reflection  of  the 
fact  that  in  that  case  the  initial  attitude  could  be  increased  or  decreased.  Mathemati¬ 
cally  speaking,  in  that  case  e  could  be  either  positive  or  negative.  In  this  case,  by 
contrast, e  can  only  be  positive.  If  e  were  negative,  then  the  constraint  that  the 
attitude  stay  between  +6  and  -6  would  be  violated. 

The  last  perturbation  to  the  optimal  strategy  assumes  that  the  attitude  is  changed 
by  E  at  orbit  angle  S  where  ^  ^  ^  2 ir 6  .  Assume  first  that  e  >  0.  In  this  case  the  change 
in  efficiency  is  given  by  -  -  B 
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As  before  let  g(E)  =  E'  -  E  then  g(0)  =  0  and 
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Since  IT  > >e>  0  then  g'(0)<0. 


On  the  other  hand  if  e<0  then 
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Clearly  E'  -  E  =  0  when  c 
To  first  order  in  e 
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Since  this  inequality  is  obviously  true,  the  ones  preceding  it  are  true  also. 
Therefore,  the  perturbation  shown  in  Figure  5d  decreases  the  efficiency  of  the 
maneuver. 

The  maneuver  described  as  optimal  has  been  shown  to  satisfy  first  order  necessary 
conditions  and  some  second  order  necessary  conditions.  Furthermore,  it  satisfies 
intuition.  There  is  a  practical  difficulty  with  it  however. 

The  torque  causing  the  satellite  to  precess  is  usually  so  small  that  the  thrusters 
cannot  fire  at  a  low  enough  level  to  just  offset  that  torque.  The  attitude  maneuvers 
tend  to  be  a  series  of  impulsive  maneuvers  of  some  minimum  size  instead  of  a  continuous 
low  level  firing.  An  approach  which  acknowleges  this  practical  reality,  but  which  is 
close  to  optimal  is  discussed  in  the  next  section. 

III.  ALGORITHM  FOR  QUANTIZED  ATTITUDE  MANEUVERS 

Basically,  the  attitude  control  strategy  is  a  sequence  of  four  types  of  maneuvers. 

The  first  type  is  no  thrusting.  The  attitude  drifts  without  correction  in  this  section. 

The  second  is  thrusting  to  just  keep  the  attitude  on  the  upper  threshold.  The  third  is 
an  impulsive  maneuver  at  the  descending  node.  The  fourth  is  thrusting  to  just  keep  the 
attitude  on  the  lower  threshold.  After  the  fourth  section,  the  strategy  goes  back  to  the 
first  section  and  does  not  exert  any  correction.  Thereafter  the  sequence  is  repeated. 

Now  suppose  that  the  only  available  attitude  maneuver  is  an  impulsive  attitude  change 
of  some  minimum  amplitude  a  .  Suppose  also  that  the  satellite  begins  with  zero  attitude 
at  the  ascending  node.  If  the  optimal  strategy  is  followed  then  the  attitude  precesses 
until  the  upper  threshold  is  reached.  At  that  point  some  attitude  maneuver  must  be 

executed.  The  minimum  is  an  impulse  of  magnitude  o.  The  attitude  is  then  below  the  thres¬ 
hold  by  a  and  can  be  allowed  to  drift  until  the  threshold  is  again  reached.  Another 

impulsive  change  of  a  is  made.  This  sequence  continues  until  the  descending  node  is 


reached.  At  the  descending  node  the  desire  is  to  execute  a  maneuver  which  will  carry 
the  attitude  down  to  the  lower  threshold  i.  Since  the  only  maneuver  which  can  be 
executed  is  an  impulsive  change  of  magnitude  a  then  a  rapid  succession  of  changes  are 
made.  When  the  attitude  passes  -(6-a)  firing  must  stop.  Another  pulse  would  carry  the 
attitude  outside  the  band  ±  «.  The  attitude  is  allowed  to  precess  until  the  threshold 
-(6-a)  is  reached. 

At  this  point  a  correction  of  o  can  be  executed.  This  correction  will  just  take  the 
attitude  down  to  the  lower  limit.  The  attitude  is  then  allowed  to  precess  again  until 
the  level  -(5-o)  is  reached.  The  sequence  continues  until  the  time  where  correction 
ceases  and  the  attitude  is  allowed  to  drift.  The  attitude  then  drifts  up  to  the  upper 
threshold  6  and  the  operation  begins  afresh. 

What  has  developed  is  a  procedure  whereby  the  attitude  is  continuously  compared  to  a 
switching  threshold.  As  long  as  the  attitude  is  lower  than  the  threshold,  it  is  allowed 
to  drift.  If  the  attitude  is  greater  than  or  equal  to  the  threshold,  a  maneuver  is 
executed.  The  threshold  value  is  switched  between  +6  and  -(6-o).  The  value  -(6-a)  is 
used  for  the  threshold  from  the  descending  node  until  the  point  where  the  optimal 
strategy  would  allow  the  attitude  to  drift.  During  the  remaining  portion  of  the  orbit 
the  value  6  is  used.  Figure  6  shows  how  the  attitude  might  vary  using  this  algorithm. 


Figure  6.  Attitude  History  Using  Impulsive  Control 

Extensive  numerical  computations  have  been  done  to  estimate  the  fuel  savings  that 
this  algorithm  will  yield  for  the  Intelsat  VI  satellite  being  built  by  an  international 
team  headed  by  Hughes  Aircraft  Company  for  the  International  Telecommunications  Satellite 
Organization  (INTELSAT) .  This  satellite  is  designed  to  provide  major  international  com¬ 
munications  traffic  links.  The  satellite  will  be  positioned  in  geosynchronous  equatorial 
orbit.  It  is  required  that  the  attitude  drift  be  kept  within  ±  0.04®.  Precession  of  the 
satellite  is  principally  due  to  solar  torque.  The  solar  torque  precession  rates  vary  over 
the  ten-year  design  life  of  the  satellite.  This  variation  is  principally  due  to  changing 
spacecraft  mass  as  a  result  of  propellant  expenditure.  In  addition,  the  precession  rate 
varies  over  the  year  because  the  equatorial  orbit  changes  its  aspect  angle  to  the  sun. 

The  precession  rate  is  fairly  constant  over  a  day,  but  there  is  some  variation  in  the 
rate  due  to  the  changing  aspect  angle  of  the  satellite's  earth-pointing  antennas.  The 
maximum  precession  rate  is  about  0.14°  per  day.  The  minimum  imoulsive  attitude  change 
about  0.02°.  Numerical  calculations  indicate  that,  in  all,  about  14.2  kg  of  propellant 
will  be  required  for  attitude  maneuvers  on  Intelsat  VI  during  its  ten-year  life.  Of  this 
14.2  kg,  13.0  kg  contributes  directly  to  control  orbit  inclination. 

IV.  SUMMARY 

An  algorithm  for  attitude  control  has  been  presented  that  derives  a  benefit  for  orbit 
inclination.  This  algorithm  is  useful  for  a  spinning  satellite  using  an  offset  axial 
thruster  to  perform  attitude  maneuvers.  Depending  on  the  circumstances  of  the  mission, 
significant  fuel  savings  may  be  derived  by  the  use  of  this  algorithm. 
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SUMMARY 


This  paper  reviews  a  new  formulation  of  the  feedback  control  problem  that 
captures  both  its  performance  and  robustness  aspects.  The  basic  analysis 
tool  in  this  formulation  is  the  structured  singular  value.  The  methods  are 
potentially  applicable  to  Large  Space  Structure  Control  Problems  since  they 
allow  for  uncertainty  in  a  very  natural  way.^ 

1.  INTRODUCTION  ^ 


The  basic  requirement  of  feedback  systems  is  to  achieve  certain  desired  levels  of 
performance  and  also  to  be  tolerant  of  uncertainties.  Performance  levels  concern  such 
things  as  command  following,  disturba.nce  rejection,  sensitivity,  etc.,  while  uncer¬ 
tainty  tolerances  deal  with  the  inevitable  differences  which  exist  between  a  physical 
plant  and  its  mathematical  model.  As  discussed  in  various  textbooks  and  references, 
these  two  aspects  of  the  feedback  problem  lead  to  fundamental  tradeoffs  and  compro¬ 
mises  which  motivate  the  entire  body  of  feedback  theory.  ([1],  [2]) 

An  essential  difficulty  in  the  theory  has  been  to  capture  both  the  performance  and 
uncertainty  aspects  of  feedback  in  a  single  problem  statement.  A  recent  problem  for¬ 
mulation  has  been  proposed  which  captures  both  aspects  of  feedback  under  the  umbrella 
of  what  is  called  the  "block-diagonal  bounded  perturbation  problem."  The  solution  to 
this  problem  involves  a  generalization  of  the  ordinary  singular  value  decomposition. 

It  provides  a  reliable,  nonconservative  measure  to  determine  whether  both  the  perfor¬ 
mance  and  robustness  requirements  of  a  feedback  loop  are  satisfied.  This  measure  is 
called  the  structured  singular  value  (SSV)  and  serves  as  the  essential  analysis  tool. 
One  of  the  major  goals  of  this  paper  is  to  disseminate  this  problem  formulation. 

(141.  (51) 

The  second  goal  of  this  paper  is  to  briefly  indicate  how  the  structured  singular  value 
methods  apply  to  Large  Space  Structures  (LSS)  Control  Problems.  LSS  problems  have 
performance  requirements  for  pointing,  tracking,  and  shape  control.  These  performance 
requirements  must  be  maintained  in  the  face  of  significant  uncertainty  in  the  form  of 
disturbances,  noises,  and  uncertainty  in  the  structure  itself  and  its  actuators  and 
sensors.  Maintenance  of  performance  in  the  face  of  uncertainty  will  be  referred  to  as 
robust  performance. 

The  SSV  methods  outlined  in  this  paper  provide  the  first  reliable  technique  for 
analyzing  the  performance  of  a  system  in  the  presence  of  both  uncertain  inputs  (dis¬ 
turbances  and  noises)  and  uncertain  plant  dynamics.  Previous  methods,  based  on  covar¬ 
iance  or  singular  value  analysis,  evaluated  either  nominal  performance  or  robustness 
of  stability  but  not  robust  performance.  Thus  the  SSV  methods  provide  a  promising 
alternative  for  LSS  control  problems. 

2.  MATHEMATICAL  PRELIMINARIES 

2.1  Topics  from  Functional  Analysis 

The  foundation  for  the  development  in  this  paper  is  provided  by  a  review  of  a  num¬ 
ber  of  basic  concepts  from  functional  analysis.  The  first  of  these  is  the  normed 


linear  space  L 


rxm 


This  function  space  is  the  collection  of  all  rxm-dimensional 


functions  which  are  square  Integrable  on  R,.  An  inner  product  for  any  two  functions  x 
and  y  in  lI***  is  defined  as 


<x,y> 


;  Tr[y”(t)x(t)]dt 


(2.1) 


The  norm  associated  with  this  inner  product  is 

Hxllj  -  <x.x> 
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(2.2) 


Elements  of  have  finite  norm  and  are  equivalence  classes  of  functions  diffoiitii 

on  sets  of  measure  zero. 
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The  chief  limitation  of  the  space  Lg*"*  for  control  system  analysis  is  that  it 
contains  no  unstable  functions,  i.e..  functions  with  llxll,  =  «>.  This  can  be  remedied 
by  introducing  the  extended  normed  linear  space  •  This  space  is  the  collection  of 

all  functions  which  ace  square  integrable  on  all  finite  intervals  of  R.  More 
precisely,  we  introduce  the  truncated  norm  as 


Ilxll^  ^  =  {  /  Tr[x‘’(t)x(t)  ]dt) 

*  -T 


Then  L_  contains  all  functions  x:R-»C^  which  satisfy  Itxtl  <«>  for  all  x.  Functions 
/e  ^  .  i 

such  as  x(t)>e  are  included  in  1-2^.  for  example,  while  functions  such  as  x(t)=tan(t) 
are  not.  Note  that  all  elements  of  ace 

included  in  the  extension  L^g  and  have  the  property  that  IIXII2  ^-*11x112  as  x-*®. 


The  other  function  space  we  will  need  is  .  This  space  consists  of  all 

functions  which  ace  measurable  and  essentially  bounded.  It  is  a  normed  linear  space 
with  norm 

llxll  =  ess  sup  o  (x(t))  (2.4) 

OB 

No  distinction  will  be  made  between  functions  differing  over  sets  of  measure  zero  and 
in  the  sequel  we  will  use  sup  for  the  essential  supcemum.  The  symbol  o(*)  denotes  the 
maximum  singular  value  of  a  matrix.  The  singular  values  of  a  matrix  A  are  the  non- 

U 

negative  square  coots  of  the  eigenvalues  of  the  Hermitian  form  A  A. 

The  Fourier  transform  of  a  function  x  is 

x(jM)  .  /  x(t)e‘J“’^dt  (2.5) 
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The  operation  of  the  Fourier  transform  is  a  linear  Isometry  of  I*!*"* 

Parseval  formula  relates  inner  products 


and  specializes  to 


x.y  .  X.  y 
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An  operator  G  is  a  mapping  which  associates  with  each  function  in  its  domain 
exactly  one  function  in  its  range.  For  our  purposes,  the  domain  of  an  operator  will 
be  L^g  and  its  range  will  be  some  subset  of  i>2e'  mapping  of  an  operator  is  denoted 

y  .  Gx  (2.8) 

It  is  assumed  that  G  is  a  causal  operator.  Causality  means  that  the  output  of  G  at 
time  t,  does  not  depend  on  values  of  the  input  at  future  times,  say  t2 
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An  operator  has  a  norm  induced  by  the  norms  on  L^g  and  I<2e'  induced  operator 

^  IIGxIl 

IIGII  =  sup  sup  ..rii  (2.9] 

^  ^  X  llxll  2  -0 


The  causal  operator  g  is  said  to  be  L-  stable  if  it  has  finite  gain,  i.e., 

_ - _ ^fm  ,  ,r 


Iigil2_,2  Thus  L2g  stable  operators  map  L2  into  L2. 


He  now  restrict  attention  to  linear  operators  G  defined  by  the  convolution  integral 


(Gx)(t)  .  X  g(t-x)  x(x)dx 


(2.10) 
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where  g  is  absolutely  integiable.  Fubini's  theorem  provides  a  relationship  between 
the  Fourier  transform  of  y>Gx  and  the  transforms  of  g  and  x. 


y  -  G  X  (2.11) 

He  refer  to  G  as  the  transfer  matrix  of  the  operator  G.  The  Fourier  transform  con¬ 
verts  the  original  convolution  into  multiplication  in  the  transformed  (frequency) 
domain.  Moreover,  the  Fourier  transform  relates  the  norm  of  an  stable  operator  G 
to  the  transform  G.  By  the  Parseval  formula  (2.7). 

IIGxii  IIGxIl 

"^"2-2  -  lunT-  =  -77 

11XII2  I*  0  ^  iixn^  *  0"*"  2 

In  fact,  it  can  be  shown  [6]  that 

"-"2-*2  °  *  ®“P  ®  (2.13) 
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Thus  for  stable  convolutional  operators,  the  norm  is  simply  equal  to  the  supremum  over 
frequency  of  the  largest  singular  value  of  the  transfer  matrix.  This  makes  convolu¬ 
tional  operators  into  a  normed  linear  algebra. 

2.2  Performance  Measures  for  Linear  Systems 

Two  alternate  measures  of  performance  for  linear  systems  are  related  to  the  basic 
concepts  of  functional  analysis  in  this  section.  Broadly  speaking,  “good"  performance 
means  that  some  error  response  is  "small"  in  an  appropriate  sense.  An  example  of  such 
an  error  response  is  the  classical  output  sensitivity  function  of  a  feedback  loop 
which  relates  command  following  errors  to  output  commands.  Another  example  is  the 
response  at  the  input  of  a  plant  to  sensor  noise  on  the  measured  variable.  He  will 
characterize  an  error  response  as  an  operator  and  measure  its  size  through  norms  on 
the  operator.  The  operator  is  denoted  g  and  maps  inputs  u  in  l"  into  outputs  y  in  l|. 

The  first  type  of  performance  considered  is  stochastic  performance,  i.e.  the  sta¬ 
tistical  behavior  of  the  error  subject  to  random  inputs.  If  the  input  u  is  zero  mean 
white  noise  with  unit  intensity,  then  the  covariance  of  the  error  is  simply 

E(|y(t)|^)  -  llgll^  -  IIGII^  (2.14) 

H 

This  performance  measure  is  the  Integral  in  the  frequency  domain  of  Tr(G  G).  More 
generally,  the  input  can  be  colored  noise  formed  by  shaping  white  noise  through  the 
operator  R~^.  Also,  we  have  the  freedom  to  examine  the  covariance  of  a  filtered 
version  of  the  error,  say  z  •  Ly.  For  example,  such  a  filter  operator  could  be  used 
to  emphasize  a  particularly  crucial  band  in  the  frequency  domain  or  to  deemphasize  low 
or  high  frequencies.  Including  the  operators  L  and  R~^  yields 

E(|z(t)|^)  .  ~  HLGR'^H^^  (2.15) 

The  stable  operators  L  and  R  ^  serve  as  weightings  in  the  frequency  domain  in  the 
integral  (2.15).  This  measure  of  performance  has  received  a  great  deal  of  attention 
in  the  literature  on  Hlener  and  Kalman  filtering  and  the  linear-quadratic-Gaussian 
control  problem. 

The  second  type  of  performance  measure  is  "worst  case"  performance.  The  idea  in 
this  case  is  to  let  the  input  be  any  arbitrary  function  in  L™  with  unit  norm.  Then 
the  size  of  the  error  in  the  worst  case  is 

sup  llyll,  .  Ilgll.  -  =.  lIGM  (2.16) 

IIUII2.I  ^ 

Good  performance  in  this  sense  requires  having  a  small  value  of  a(G()u))  at  every 
frequency  u.  The  utility  of  this  approach  to  measuring  performance  is  increased  by 
introducing  weighting  operators  L  and  R  much  as  was  done  for  stochastic  performanr^ . 


IILGR 


(2.17) 


With  the  weightings,  we  have 

sup  IILyll  =  IILGR 

IIRUII2-I  °° 

This  measuce  of  performance  can  be  written  in  a  slightly  different  form  to  emphasis 
its  use  as  a  performance  specification.  Mathematically, 

Ii:.7ll2  <1  for  all  IIRull  2<1 


iff  IILGR"2..,2  " 


iff  IILGR  "11  <1 


(2.18) 


This  says  that  having  the  maximum  singular  value  of  the  (weighted)  transfer  matrix 
less  than  one  at  every  frequency  is  necessary  and  sufficient  for  the  (weighted)  error 
to  have  norm  less  than  one  for  any  (weighted)  input  with  norm  no  larger  than  one. 

This  measure  has  been  the  subject  of  recent  theoretical  interest  within  the  control 
community  [7],  [8].  Also,  when  viewed  as  condition  on  the  norm  of  LGR”^,  this  mea¬ 
sure  of  performance  is  applicable  to  nonlinear  systems. 

Both  of  these  performance  measures  are  expressed  in  terms  of  norms  on  weighted 
transfer  matrices.  Both  are  useful  in  the  analysis  of  linear  systems.  The  design 
problem  in  the  first  case  is  to  minimize  "average"  error  in  the  integral  square 
sense.  In  the  second  case,  the  design  problem  is  a  mini-max  problem:  minimize  the 
worst  case  error  in  the  integral  square  sense.  Note  that  the  weightings  on  inputs  and 
outputs  can  always  be  absorbed  into  the  input-output  transfer  function.  Thus,  while 
weightings  are  essential  to  adequately  model  physical  signals,  the  analysis  need  not 
distinguish  between  weighted  or  unweighted  transfer  functions.  As  an  aside,  we  note 
that  the  performance  measure  in  (2.15)  can  also  be  interpreted  as  a  mini-max  problem 
with  the  error  signal  measured  by  the  L^  norm  and  inputs  in  L^. 

2.3  Sectors 

In  the  last  several  years,  the  sector  concept  ( [9 ] . [ 10] , [ 11 ] )  has  been  recognized 
as  an  important  tool  in  feedback  design  and  analysis.  The  basic  idea  is  that  very 
complicated  plant  operators  (perhaps  nonlinear,  infinite  dimensional,  time-varying) 
can  be  reliably  approximated  by  simple  sector  centers  (usually  finite  dimensional, 
linear,  time-invariant  systems),  provided  that  the  approximation  error  is  properly 
accounted  for  in  the  design  process.  This  "proper  accounting"  usually  means  that  a 
design  based  on  the  sector  center  must  be  restricted  to  maintain  stability.  Such 
restrictions  generally  increase  as  the  magnitudes  of  the  approximation  errors  grow. 
This  section  provides  an  introduction  to  sectors  and  gives  a  stability  test  in  terms 
of  a  sector  condition.  It  concludes  with  an  interpretation  of  the  stability  test  as 
imposing  restrictions  on  the  nominal  design. 


»  • 


In  abstract  terms,  a  sector  condition  is  a  functional  inequality  describing  the 
set  of  operators  in  a  specified  neighborhood  of  some  nominal  operator.  Formally,  the 
sector  (C.L,R)  is  the  set  of  all  operators  G  mapping  L™^  into  L^^  which  satisfy 


IIL(G-C)  xll  ,  ^  <  IIRxIl-  ,  V  tcR  ,  xcL" 
—  —  —  2,t  —  2,t  +  2e 


(2.19) 


The  nominal  operator  C  is  referred  to  as  the  center  of  the  sector.  The  operators  L 
and  R  specify  the  size  of  the  neighborhood  about  C.  We  will  require  L  and  R  to  be 
L,  -stable  operators  and  to  have  L__-stable  inverses.  When  L  and  R  are  linear, 
time-invariant  operators,  this  means  they  have  no  poles  or  zeros  in  the  right-half  of 
the  complex  plane  and  no  excess  of  poles  or  zeros.  In  the  case  of  an  L^^-stable 
center,  condition  (2.19)  can  be  rewritten  as 


1 


(2.20) 


IIL(G-C)R  Il2_,2^  ^ 

It  is  noteworthy  to  compare  this  condition  with  the  performance  spec i f i ca t i jn  (2.18). 


2.4  Stability  Conditions 

Having  introduced  sectors,  we  now  turn  to  characterizing  the  stability  of  a  feed, 
back  system  when  an  operator  in  the  system  is  described  by  a  sector.  Consider  the 
feedbacK  configuration  shown  in  Figure  2-1.  The  two  closed-loop  operators  of  this 
system  are  and  E^.  mapping  both  inputs  Uj^  and  u^  into  the  outputs  e^  and  e^ . 
respectively.  It  is  assumed  that  the  system  is  causal  and  well-posed,  [6]  i.e.,  the 
operators  M.D,Ej^.  and  E^  are  all  causal.  The  system  is  stable  if  both  E^^  and  E_,  are. 


Theorem  2-1.  (Small  Gain  Theorem)  Under  these  conditions,  the  closed- loop  system  is 

L.,  -stable  if 
2e 


M  112^2  "  ^  "2-2  <  1 


A  brief  discussion  of  the  proof  of  this  theorem  follows.  The  error  ei  is  given  by 

(2.24) 


"1  =  “1  - 


=  -  AU2  -  AMe^ 


and  so 


( 1+^)  =  Uj^  -  A  “2 


(2.2S) 


The  norm  of  the  right-hand  side  of  (2.25)  is  bounded  from  above  by 

"  “1  "2  "  "  ^  "2-2  "  "2  "2 
and  the  left-hand  side  is  bounded  from  below  by 


(1  -  II  A  112^2  "  ^  "2^2 >  “  ®1  "2 


Combining  these  bounds  and  using  the  inequality  of  the  theorem  yields 


II  e^ll 

Thus  the  operator  Ej^ 
similarly . 


1-IIMII2^2  "”"2-2 


has  finite  gain  and 


(IIU1II2  .  IIWIl2^2  "“2"2  ) 

is  stable.  Stability  of  E2 


is  shown 


(2,26) 


The  Small  Gain  Theorem  will  now  be  used  to  obtain  stability  robustness  conditions 
for  a  feedback  system  containing  a  sector.  Stability  robustness  conditions  will  be 
obtained  which  guarantee  the  stability  of  the  closed  loop  system  for  any  operator  that 
is  an  element  of  the  sector.  The  feedback  system  under  consideration  is  shown  in 
Figure  2-2.  Also  shown  in  the  figure  are  two  alternative  representations  of  the  feed¬ 
back  loop.  The  first  alternative  uses  the  earlier  observation  that  a  sector  may  be 
expressed  or  the  parallel  combination  of  its  center  and  a  sector  with  the  same  radius 
centered  about  the  null  operator.  The  second  alternative  representation  employs  the 
closed  loop  operator  for  the  feedback  combination  of  G  and  C.  It  is  assumed  that  the 
closed  loop  operator  M  is  L2g-8table. 

The  Small  Gain  Theorem  will  be  applied  to  the  feedback  system  in  Figure  2-2 
involving  operator  M  and  sector  (C,L,R).  Let  the  operator  A  be  any  element  (C.L.R). 

By  (2.20),  this  means  that 

II  LAR~^  Il2_,2  <1  (2.27) 

Rather  than  applying  the  Small  Gain  Theorem  directly  to  M  and  A,  we  apply  it  to  the 
operators  RML~  and  LAR~  ,  shown  in  Figure  2-3.  These  operators  are  both 
stable,  and  closed  loop  stability  of  the  system  in  Figure  2-3  is  equivalent  to  stabi 
lity  of  the  representations  in  Figure  2-2.  By  the  Small  Gain  Theorem,  closed  loop 
stability  is  guaranteed  if 
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lIRML  ^ll2-.2  ^  ^  (2.28) 

When  combined  with  (2.27), 

IIRML'^II^  „  <  1  (2.29) 

suffices  to  ensure  closed  loop  stability.  This  Is  summarized  In  the  following  theorem. 

Theorem  2-2.  Consider  the  feedback  system  of  Figure  2-2  and  assume  (C+G~^)“^  is 
L__-stable.  If 

-1  -1  -1 

IIR(C+G  )  L  112^2  -  ^  (2.30) 

then  the  closed  loop  system  is  stable  for  any  operator  in  the  sector  (C.L.R). 

As  in  the  case  of  weightings  on  inputs  and  outputs,  the  weightings  and  center  that 
determine  a  sector  can  be  absorbed  into  the  interconnecting  transfer  function.  Thus, 
without  loss  of  generality,  we  can  restrict  attention  to  sectors  of  the  form  sector 
(0,1,1).  In  this  case  (2.30)  becomes 

II  G  It  2^2  -  (2.31) 

and  for  LTI  G, 

II  G  II  <  1  (2.32) 

—  00  — 

It  will  be  helpful  to  compare  the  stability  robustness  condition  of  Theorem  2.2 
with  the  performance  specification  (2.18).  Stability  robustness  is  ensured  if  a 
closed  loop  operator  when  “weighted"  by  R  and  L~  has  norm  less  than  one.  Perfor¬ 
mance  is  achieved  if  some  closed  loop  error  operator  has  "weighted"  norm  less  than 
one.  The  same  type  of  condition  applies  in  both  cases.  Because  the  same  condition  is 
used  for  both  a  performance  specification  and  stability  robustness,  we  will  be  able  to 
obtain  a  combined  condition  which  can  guarantee  simultaneous  robust  performance  and 
stability. 

3.  ANALYSIS 

The  mathematical  tools  of  the  previous  section  can  be  put  together  to  analyze  the 
performance  and  robustness  properties  of  control  systems.  The  remainder  of  this  paper 
explores  various  modelling  assumptions  and  the  impact  these  assumptions  have  on  analy¬ 
sis  methods.  This  section  summarizes  these  assumptions  and  the  resulting  analysis 
tools.  Referring  to  Figure  3-la,  the  nominal  model  is  assumed  throughout  to  be  a 
Linear,  Time-Invariant  Ordinary  Differential  Equation  (LTIODE).  The  uncertain  inputs 
are  assumed  to  be  either  filtered  white  noise  or  weighted  L^-norm  bounded  signals. 

The  plant  uncertainty  is  modelled  as  perturbations  (not  necessarily  small)  to  the 
nominal.  Performance  is  measured  in  terms  of  either  the  weighted  error  covariance  or 
the  weighted  L^-norm  of  the  error. 

These  performance  measures  are  intended  to  reflect  engineering  issues  such  as  good 
command  response  or  small  errors  in  regulation  or  estimation.  Perturbations  typically 
arise  in  an  attempt  to  model  changes  and  uncertainty  in  operating  conditions  and  plant 
characteristics  as  well  as  unmodelled  dynamics.  Uncertain  inputs  model  disturbances, 
noises  and  commands.  The  analysis  framework  used  in  this  paper  includes  all  the  stan¬ 
dard  linear  time-invariant  filtering  and  control  problems,  including  the  so-called 
two-degree-of-f reedom  control  problem.  This  last  problem  is  obtained  when  commands 
are  modelled  in  the  usual  way  as  uncertain  input  signals. 

Since  the  focus  of  this  section  is  on  analysis,  the  controller  can  be  viewed  as 
just  another  system  component.  Thus  for  analysis  purposes.  Figure  3-la  may  be  reduced 
to  Figure  3-lb.  Here  P  is  a  2x2  block  transfer  function  matrix  providing  connections 
from  external  inputs  and  perturbations  to  outputs  and  perturbations.  Without  loss  of 
generality,  the  input  signals,  errors  and  perturbations  can  be  left  unweighted  since 
any  weightings  can  be  absorbed  into  the  interconnection  operator  P.  Note  than  any 
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interconnection  of  inputs  and  outputs  with  components  and  perturbations,  including 
weightings,  may  be  rearranged  into  this  form.  Then  the  output  can  be  written  as 

e  =  (P22  -  P21 

It  is  assumed  that  stability  is  always  a  performance  requirement  and  thus  that  P 
has  all  its  poles  in  the  open  left-half  plane. 

The  standard  modelling  assumptions  and  the  resulting  analysis  methods  are  summa¬ 
rized  in  Table  3-1.  The  first  option  is  that  uncertainty  is  modelled  as  white  noise 
and  performance  is  measured  in  terms  of  error  covariance.  From  (2.14),  the  error 
covariance  can  be  evaluated  in  terms  of  the  L2-notm  of  P22-  This  model  is  appealing 
in  that  many  physical  noises  and  disturbances  have  existing,  accepted  models  as 
filtered  white  noise  and  that  computation  of  ••P22'*2  quite  easy  using  Lyapunov 
equations.  Furthermore,  synthesis  (the  so-called  Wiener-Hopf-Kalman  (WHK)  theory)  in 
this  context  involves  linear  approximation  in  a  Hilbert  space,  also  computationallv 
appealing.  Unfortunately,  few  physical  systems  are  adequately  modelled  with  additive 
white  noise  as  the  only  uncertainty. 

Some  alternatives  to  the  white  noise  view  of  uncertainty  are  summarized  in  the  remain¬ 
der  of  Table  3-1.  These  options  may  be  thought  of  as  being  separate  cases  of  the  fol¬ 
lowing  general  form  of  a  performance/robustness  theorem: 


Given 


Modelling  Assumptions 


Performance 

Analysis 

(3.2) 

Reoulrement 

iff 

Test 

is  satisfied  is  satisfied 

The  first  alternative  (Case  2)  involves  modelling  inputs  as  unXnown-but-bounded 
(in  an  L^-sense)  and  requiring  that  the  output  remain  bounded  (in  L^)  below  a  spe¬ 
cified  level  for  all  such  inputs.  From  (2.19)  the  resulting  analysis  test  involves 

the  L  -norm  of  the  same  norm  which  appears  in  the  robust  stability  test  of  Case  3 

«  22 

(from  2.32).  The  chief  advantage  of  these  assumptions  over  Case  1  is  that  both 

uncertain  inputs  and  plant  perturbations  are  handled  with  the  same  lt*ll  test.  A  lees 

00 

compelling  reason  is  that  designs  for  unKnown-but-bounded  inputs  and  outputs  can  be 
given  a  mini-max  energy  interpretation. 


Note  that  any  induced  operator  norm  would  provide  an  analysis  test  that  would  han¬ 
dle  both  uncertain  norm-bounded  inputs  and  (induced)  norm-bounded  perturbations.  For 
example,  modeling  signals  as  unKnown-but-bounded  in  magnitude  (and  using  the  resulting 
induced  norm  for  convolution  operators  on  L^  for  analysis)  has  obvious  advantages  in 
applications  where  signal  magnitude  is  a  more  natural  notion  than  energy.  On  the 

other  hand,  there  are  some  important  reasons  for  choosing  L.  signal  models.  Il•ll 

2  w 

perturbation  bounds,  and  analysis  tests  over,  say,  other  spaces: 

1.  The  induced  convolution-operator  norm  on  L_  (i.e.,  Il•ll  on  transfer 

2  ® 

functions)  is  the  only  induced  norm  which  yields  necessary  as  well  as 
sufficient  robust  stability  tests. 


2.  Perturbation  models  of  this  type  are  currently  the  most  easily  obtained. 


3  . 


An  optimal  synthesis  theory  analogous  to  that  of  WHK  is  now  available 
(i.e.,  the  main  result  of  reference  [6]). 


4.  Engineers  have  developed  substantial  experience  with  these  methods 

through  the  use  of  Bode  plots  and  more  recently,  their  singular  value 
generalizations  [1]. 

Clearly,  these  reasons  are  not  entirely  independent.  The  H*!!^  norm  on  trans-  fer 
functions  is  reasonably  easily  computed,  but  it  does  involve  a  search  over  one 
frequency  variable. 

It  should  be  reiterated  that  in  practice  the  use  of  weights  on  signals  and  pertur¬ 
bations  is  essential,  since  both  vary  with  direction  and  frequency.  This  is  true 
independent  of  the  particular  assumptions  being  made.  By  absorbing  any  weightings 
into  the  interconnection  function  P,  the  weighted  case  can  be  reduced  to  that  consi¬ 
dered  in  Figure  3-1  and  Table  3-1.  This  is  one  advantage  of  the  framework  proposed 
here  over  less  general  ones  in  that  any  interconnection  of  signals,  systems  and  per¬ 
turbations,  including  weights,  can  be  rearranged  to  fit  the  framework. 

While  Cases  2  and  3  provide  a  single  framework  in  which  to  analyze  performance  and 
robustness  (of  stability),  the  11*11^  norm  alone  provides  no  systematic,  reliable  method 
for  analyzing  robust  performance.  Furthermore.  11*11^  analyzes  robustness  with  respect 
to  purely  unstructured  uncertainty.  A  more  sophisticated  tool  that  treats  robust 
performance  with  respect  to  structured  uncertainty  involves  the  struc-  tured  singular 
value,  u,  and  This  is  the  subject  of  the  remainder  of  the  paper. 

Cases  4  and  S  of  Table  3-1  summarize  the  two  basic  applications  of  u  to  analy¬ 
sis.  Case  4  gives  a  structured  version  of  Case  3  by  characterizing  robust  stability 
with  respect  to  block-diagonal  perturbations.  This  is  quite  general  since  any  inter¬ 
connection  of  perturbations  can  be  rearranged  to  fit  the  structure  of  Figure  3-1  with 
a  block  diagonal  A.  Case  6  generalizes  cases  2,  3,  and  4  by  characterizing  the  per¬ 
formance  (in  an  L^-bounded  sense)  for  systems  with  structured  uncertainty.  This  is 
currently  the  only  available  method  for  systematically  analyzing  the  performance  of 
complex  systems  with  plant  perturbations.  Many  aspects  of  LSS  contrc  problems  natu¬ 
rally  fit  in  the  framework  outlined  in  this  section.  Table  3-2  lists  some  common 
sources  of  uncertainty  in  the  form  of  commands,  disturbances  and  noises,  and  perturba¬ 
tions.  Figure  3-2  shows  schematically  how  uncertain  models  for  actuators,  sensors  and 
the  spacecraft  structure  can  be  rearranged  to  fit  the  framework  of  Figure  3-1.  The 
remainder  of  the  paper  will  review  the  details  of  analysis  using  11*11^- 

4.  FEEDBACK  ANALYSIS  AS  A  BLOCK-DIAGONAL  BOUNDED  PERTURBATION  PROBLEM 

4.1  Robustness  Characterization 

This  section  formulates  the  basic  feedback  problem  of  achieving  performance  in  the 
face  of  uncertainties  as  a  stability  problem  in  the  presence  of  block-diagonal  bounded 
perturbations  [4].  The  formulation  involves  sector-bounded  transfer  functions  as 
basic  building  blocks.  The  robustness  and  performance  properties  of  a  feedback  system 
will  be  expressed  in  terms  of  a  collection  of  linear,  time-invariant  operators. 
i=l,  2,  •••,  m,  each  of  which  is  an  element  of  a  sector  with  zero  center,  i.e., 

A^c (0, L^ .R^ ) .  These  operators  are  the  basic  building  blocks  in  a  combined 
robustness/performance  characterization  of  feedback  systems. 

The  use  of  sector  bounded,  linear,  time-invariant  operators  to  characterize 
robustness  has  been  a  central  theme  in  many  recent  references,  including  [1]  where 
such  operators  were  inserted  at  the  inputs  or  outputs  of  a  plant  model  in  order  to 
represent  so  called  unstructured  uncertainties  (modeling  errors  with  no  assumed  struc¬ 
ture  except  for  known  magnitude  bounds  on  their  transfer  functions).  Necessary  and 


sufficient  conditions  such  as  Theocem  2-2  were  then  derived  for  stability  robustness 
in  the  face  of  such  uncertainties.  For  example,  a  stable  feedback  loop  with  plant  G 
and  compensator  K  will  remain  stable  in  the  face  of  all  possible  perturbed  plants  G'  ^ 
[I  +  A]G,  with  A  c(0,L,R).  if  and  only  if 

II  RGK{I*GK)'^  II  <  1  (4.1) 

OD  — 

Note  that  with  R  and  L  specified,  this  inequality  imposes  conditions  on  the  shape  of 
the  closed  loop  frequency  response.  GK(I  +  GK)'  ,  which  must  be  satisfied  in  order  to 
assure  robust  stability.  These  conditions  are  unique  to  the  assumed  form  of  plant 
perturbations  (e.q..  G'  -  (I  +  A)G  in  the  present  case).  Each  such  assumed  form 
corresponds  to  a  specific  location  where  A  is  inserted  in  the  nominal  feedback  loop. 
The  location  for  our  present  case  is  shown  in  Row  1  of  Table  4-1.  Other  locations 
correspond  to  other  assumed  forms  for  G'  and  produce  different  necessary  and  suffi¬ 
cient  stability  robustness  conditions.  A  representative  set  of  possibilities  is  sum¬ 
marized  in  the  remaining  rows  of  Table  4-1.  Of  course,  each  case  in  Table  4-1  is  a 
special  case  of  Figure  3-1. 

Table  4-1  also  indicates  representative  types  of  physical  uncertainties  which  can 
be  usefully  represented  by  sector  bounded  perturbations  inserted  at  the  indicated 
locations.  For  example,  the  representation  G'  >  (I  +  A)G  in  Row  1  is  useful  for 
output  errors  at  high  frequencies,  covering  such  things  as  unmodelled  high  frequency 
dynamics  of  sensors  or  plant,  including  diffusion  processes,  transport  lags,  electro¬ 
mechanical  resonances,  etc.  The  representation  G'  •  G(1  +  A)  in  Row  2  covers  simi¬ 
lar  types  of  errors  occurring  at  the  inputs.  Both  cases  should  be  contrasted  with 
Bows  4  and  5  which  treat  G'  «  (I  +  A)“^G  and  G*  -  G(I  ♦  A)"^.  These  representations 
are  more  useful  for  variations  in  modelled  dynamics,  such  as  low  frequency  errors 
produced  by  parameter  variations  with  operating  conditions,  with  aging,  or  across 
production  copies  of  the  same  plant.  Discussion  of  still  other  cases  is  left  to  the 
table.  Note  from  the  table  that  the  stability  requirements  on  A  do  not  limit  our 
ability  to  represent  variations  in  either  the  number  or  location  of  rhp  singvlarities . 

The  most  significant  thing  to  understand  about  Table  4-1  is  that  the  stability 
robustness  conditions  shown  are  sufficient  to  ensure  stability  only  if  all  the  uncer¬ 
tainties  occur  at  the  indicated  locations  and  none  occur  elsewhere.  In  order  to  use 
the  conditions  directly,  therefore,  designers  are  obliged  to  reflect  all  known  sources 
of  uncertainty  from  their  known  point  of  occurrence  to  a  single  reference  location  in 
the  loop.  Such  reflected  uncertainties  invariably  have  a  great  deal  of  structure 
which  must  then  be  "covered  up"  with  a  larger,  arbitrarily  more  conservative  perturba¬ 
tion  in  order  to  maintain  a  simple  cone  bounded  representation  at  the  reference  loca¬ 
tion.  By  "arbitrarily  more  conservative,"  we  mean  that  examples  can  be  constructed 
where  the  degree  of  conservatism  is  arbitrarily  large.  Of  course,  other  examples 
exist  where  it  is  quite  reasonable. 


Alternatively,  designers  could  choose  to  treat  uncertainties  occurring  at  several 
different  locations  in  the  feedback  loop  as  a  single  uncertainty  occurring  at  one 
location  in  a  larger  feedback  loop.  To  be  specific  about  this  alternative,  let  A^, 
1>1.  2,  ••*,  m,  denote  a  collection  of  such  uncertainties  positioned  at  location 
1-1.  2,  ••*,  m.  Note  that  at  each  the  feedback  loop  has  an  input,  where  it 
receives  the  signals  from  A^,  and  also  an  output,  where  it  supplies  .<^ignals  to  A^. 
Let  be  the  operator  between  these  two  sets  of  signals.  Fur-  thet,  let  .  denote 
the  operator  between  the  inputs  at  location  and  the  outputs  at  location  Then 

the  block-structured  operator 


M  =  {  } 


(4.2) 
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represents  all  interactions  of  the  feedback  loop  with  its  uncertainties,  and  indeed, 
the  block-diagonal  bounded  perturbation  diagram  in  Figure  4-1  is  an  equivalent  repre¬ 
sentation  of  the  loop.  Here  we  have  A  =  diag(Aj^.  ^2-  •••.  ■ 


Note  that  the  feedback  elements  in  this  larger  loop  are  zero  in  the  absence  of 
uncertainties.  Hence.  M  will  be  a  stable  “plant”  whenever  the  original  nominal  loop 
is  stable.  As  an  example  of  this  representation,  consider  the  system  in  Figure  4-2. 
This  system,  with  two  uncertainties  present  simultaneously,  the  first  from  Row  2  and 
the  second  from  Row  4  of  Table  4-1.  is  described  by  the  following  M  operator: 


(I  I-  KG)~^KG 
(I  +  GKi'^'G 


(I  +  KG) 

(I  +  GK)“^ 


(4.3) 


Given  the  equivalent  system  in  Figure  4-1  with  sector  bounded  A^,  it  follows  from  the 
Small  Gain  Theorem  that  the  loop  remains  stable  in  the  presence  of  these  uncertainties 
if 

IIRML'^II^  <  1 

or,  in  the  frequency  domain. 

o  [R( ju)M( ju)L(ju)'^]  <  1  V  o  (4.4) 


where  H  -  diag(R,  R_  •••  R  )  and  L  »  diag(L,  L  •••  L  ).  This  condition  provides  an 
1  2  n  1  2  n 

alternate  test  for  stability  robustness.  Like  the  procedure  of  reflecting  all 
uncertainties  to  one  reference  location,  however,  the  new  test  can  be  arbitrarily  more 
conservative  because  it  ignores  the  known  block-diagonal  structure  of  the 
uncertainties  in  Figure  4-1. 


One  of  the  objectives  of  the  results  in  this  paper  is  precisely  to  reduce  the  con¬ 
servatism  of  robustness  and  performance  tests  for  block-diagonal  structures  such  as 
Figure  4-1.  Me  do  this  by  introducing  a  generalized  notion  of  the  maximum  singular 
value  for  block-diagonal  structures.  This  generalization  is  developed  in  Section  5. 

It  is  called  the  structured  singular  value  (SSV)  and  is  denoted  by  the  symbol  u.  It 
yields  the  following  necessary  and  sufficient  conditions  for  robust  stability  of  the 
BDBP  problem: 

U[R(ju)M(iu)L"^(iu)l  _  I  .  Vo  (4.5) 

This  represents  our  extension  of  the  Small  Gain  Theorem  which  we  call  the  Small  u 
Theorem. 


Since  all  simultaneous  uncertainties  can  be  put  into  block-diagonal  form  by  merely 
constructing  the  associated  operator  RML'^,  the  SSV  allows  us  to  nonconservatively 
analyze  simultaneous  occurrences  of  uncertainties  anywhere  in  a  feedback  system.  The 
uncertainties  may  be  sector  bounded  errors  of  Individual  components  of  the  system 
(SISO  or  MINO).  they  may  be  individual  parameter  variations  in  the  model,  or  even 
polynomial  approximations  of  parameters  entering  nonlinearly.  In  fact,  the  only 
restriction  which  remains  is  that  all  variations  must  be  allowed  to  be  complex.  Pure 
real  variations  or  pure  imaginary  variations  cannot  be  separated  into  individual 
blocks . 


4.2  Performance  Characterization 

The  ability  to  treat  simultaneous,  structured  uncertainties  also  offers,  almost  as 
a  free  byproduct,  the  ability  to  deal  simultaneously  with  the  performance  and  robust¬ 
ness  aspects  of  feedback.  As  discussed  in  2.2  and  2.4.  the  test  for  satisfaction  of  a 
performance  specification  is  identical  to  a  test  for  robustness  with  respect  to  some 
uncertainty.  That  is.  any  performance  specification  has  a  corresponding  robustness 
requirement  such  that  one  is  satisfied  if  and  only  if  the  other  is.  Thus  the  SSV 
tests  for  robustness  can  be  used  directly  to  evaluate  performance. 


The  equivalence  between  performance  and  robustness  is  elaborated  in  Column  4  of 
Table  4-1,  where  each  of  the  conditions  imposed  on  feedback  loop  shapes  by  perturba¬ 
tion  at  location  is  given  a  performance  interpretation.  For  example,  the 
perturbations  in  Row  4  impose  requirements  (through  L  and  R)  on  the  operator  (I  + 

KG)'  This  operator  is,  of  course,  the  classical  (output)  sensitivity  function  of 
the  feedback  loop.  Small  values  over  some  frequency  range  guarantee  low  closed  loop 
sensitivity  to  open  loop  variations  and  low  command  following  errors  to  output  com¬ 
mands  over  that  range.  The  test  for  satisfaction  of  any  L^-perf ormance  specifica¬ 
tion  is  identical  to  test  for  robustness  with  respect  to  some  perturbation.  That  is, 
any  performance  specification  has  a  corresponding  robustness  requirement  such  that  one 
is  satisfied  if  and  only  if  the  other  is.  Thus,  the  structured  singular  value  tests 
for  robustness  can  be  used  directly  to  evaluate  performance.  This  may  be  thought  of 
as  introducing  a  “fictitious  uncertainty"  to  impose  a  performance  requirement. 

To  illustrate  how  such  fictitious  uncertainties  actually  enforce  performance  specs, 
consider  the  simple  case  where  a  single  true  uncertainty,  say  from  Row  2,  and  a 
single  fictitious  (performance)  uncertainty,  say  A^  from  Row  4,  are  specified  for  our 
feedback  system.  Let  the  structured  singular  value  condition  (4.S)  be  satisfied  for 
the  corresponding  H  matrix,  (4.3).  Then  the  system  remains  stable  in  the  face  of  A^ 
and  Ap  occurring  simultaneously.  Obviously,  it  will  also  remain  stable  for  A^  with  A^ 

-  0.  This  means  that  the  nominal  system  must  satisfy  the  perfor-  mance  condition 

a[Rp(I  +  KG)"^l'^]  <1  Vo  (4.6) 

because  the  latter  is  also  a  necessary  and  sufficient  condition  for  robust  stability 
with  Ap  only.  This  much  is  straightforward.  What  is  not  so  evident  but  much  mote 
important  is  that  condition  (4.6)  is  also  satisfied  for  all  perturbed  feedback  loops. 
That  is.  for  all  true  plants  G'  >  G(I  *  A^)  we  have 

5tRp(I  +  KG')‘^Lp"^l  <1  Vo  (4.7) 

Hence,  the  performance  spec  is  satisfied  in  the  face  of  all  possible  true  uncertain¬ 
ties.  A  proof  of  this  consequence  of  the  structured  singular  value  condition  is  dis¬ 
cussed  in  Section  5. 

5.  STRUCTURED  SINGULAR  VALUE  ANALYSIS  OF  FEEDBACK  SYSTEMS 

5.1  Introduction  to  the  Structured  Singular  Value 

He  have  discussed  how  the  problem  of  analyzing  performance  in  the  face  of  struc¬ 
tured  uncertainty  can  be  expressed  as  a  BDBP  problem.  The  standard  singular  value 
tests  applied  to  the  BDBP  can  be  excessively  conservative  because  they  ignore  the 
block-diagonal  structure.  A  more  general  nonconservative  test  (the  Small  u  Theorem) 
is  developed  in  this  section  which  removes  this  limitation.  By  nonconservative  we 
mean  providing  a  necessary  and  sufficient  condition.  The  test  is  expressed  in  terms 
of  a  new  measure,  the  structured  singular  value  u.  This  section  begins  with  review  of 
the  results  in  [5]  where  u  was  introduced. 

To  provide  a  more  precise  description  of  block-diagonal  perturbations,  let 
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,k^)  be  a  2n-tuple  of  positive  integers.  All  the 


definitions  that  follow  depend  on  K.  but  to  simplify  the  notation  this  dependency  will 

not  be  explicitly  represented.  Let 

n  n 

k*  C  m.k.  a  nd  m  *  L  m . 
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This  could  be  taken  as  a  definition  of  u.  Alternatively,  u  could  be  defined  as 

0  if  no  dcX  solves  det(I,t'MA)  =  0 

U(M)  =  (5.5) 

min  {5(A) |det(I+MA)  =  0)  otherwise 

AcX 

This  definition  shows  that  a  well-defined  function  satisfies  (5.4).  It  probably  has 
little  additional  value  since  the  optimization  problem  involved  does  not  appear  to 
have  useful  properties. 

Using  these  definitions,  the  following  useful  properties  of  u  are  easily  proven. 


1) 

li(aM)  .  |alu(M) 

V  MeTn(k) 

2) 

Ud)  =  1 

3) 

U(AB)  <  a(A)u(B) 

V  eX,Bem(k) 

4) 

U(A)  =  o(A) 

V  AcX 

5) 

If  n:>l  and  m^>l  then  u(H)  =  o(M) 

V-  mn  (k) 

6) 

If  n>l,  kj^al,  then  k>m^, 

X  >  {\Ii\cR{  and  u(M)  =  p(M) 

V  Mcin(k) 

7) 

If  AcX.  UcU.  then  UAcX  and  AUcX  and  o(uA)=a(Au)=o(A) 

8) 

V  AcX  and  V  Dc£l 

DAD"^=A 

9) 

V-  UtU  and  M 

U{MU)  =  u(UM)  =  v(M) 

10) 

V  Dc^  and  M 

U(DMD*^)  =  u(M) 

11) 

max  p(UM)  &  u{M)  <  inf  5  (DMD”^) 

UcU.  DcSI 

V  McTn(k) 

Properties  5  and  6  show  that  the  structured  singular  value  has,  as  special  cases,  both 
the  spectral  radius  and  the  maximum  singular  value.  Property  9  means  that  u  is 
U-invariant . 


The  most  important  results  from  [5]  are  the  following,  which  deal  with  the  bounds 
in  property  11: 

A)  The  left-hand-side  inequality  in  property  11  is  always  an  equality.  This 
expresses  u  in  familiar  linear  algebraic  terms,  but  the  optimization 
problem  involved  may  have  multiple  local  maxima. 


B)  The  right-hand-side  inequality  in  II  is  an  equality  when  there  are  three 
or  fewer  blocks,  and  the  blocks  are  not  repeated.  The  blocks  themselves, 
and  therefore  M.  may  be  of  arbitrarily  large  dimension.  A  tedious  but 
straightforward  computation  shows  that  the  optimization  problem  involved 
is  always  convex  [12].  Furthermore,  the  minimization  is  over  only  n-1 
parameters  for  n  blocks,  independent  of  block  size,  making  this  an 
attractive  alternative  to  A. 

Note  that  the  transformation  DMD”^  is  simply  a  rescaling  of  the  inputs  and  out¬ 
puts  of  M.  The  SSV  is  invariant  with  respect  to  such  rescaling  (property  10),  while 
singular  values  do,  of  course,  vary  with  rescaling.  This  implies,  for  example,  that 
the  ad  hoc  method  of  performing  a  change  of  unite  can  reduce  the  conservatism  associa¬ 
ted  with  singular  values.  For  some  time  we  have  been  using  Osborne's  technique  [11], 
which  minimizes  the  Frobenius  norm  of  DMD“^  to  compute  frequency-dependent  D 
matrices.  We  now  have  new  algorithms  which  compute  D  to  directly  minimize  a(DHD~^). 

While  the  strongest  results  on  the  use  of  the  DMD"^  scaling  ate  for  nonrepeated 
blocks,  the  use  of  scaling  before  computing  singular  values  can  be  quite  effective  in 
treating  repeated  block  problems.  These  typically  arise  when  analyzing  robustness 
with  respect  to  variations  in  scalar  parameters  occurring  in  several  places  within  a 
system.  This  leads  naturally  to  problems  where  the  block-diagonal  perturbations  are 
made  of  either  nonrepeated  matrix  blocks  or  repeated  scalars.  In  this  case  the  set  x 
takes  the  special  form: 


X  »  [diag  (\,  I,  V2I.  •••  ^2*  ***  ^n 


Suppose  now  we  let 

D  -  (diag  (D, ,  D,.  •••  D„  .  d,I.  d,I.  •»*  d„  I)}  (5.e 

1  2  12  02 

Where  the  structure  of  D  matches .X  and  the  are  full  block  matrices  and  the  d^  are 

real  scalars.  Then  an  upper  bound  for  u  with  this  structure  is  again 


u(H)i  inf 
DcS 


OCDMD"'-) 


The  use  of  full  block  D^'s  improves  the  bound  and  a  simple  argument  shows  that  the 
problem  is  still  convex.  Of  course,  the  scaling  could  be  extended  to  handle  repeated 
nonscalar  blocks,  but  these  have  not  yet  been  found  to  be  applicable  to  system 
problems. 

Numerical  software  for  computing  u  has  been  developed  using  algorithms  based  on 
these  results.  In  addition  to  using  this  software  to  analyze  some  simple  feedback 
designs,  test  runs  have  been  made  on  a  large  number  of  psuedo-random  matrices.  It 
appears  that  the  global  maximum  in  A  is  often  easily  found,  although  a  simple  gradient 
search  is  inadequate.  Also,  the  bound  obtained  in  B  appears  to  be  quite  good  (to 
within  15%)  for  cases  of  more  than  3  blocks.  These  observations  are  most  encouraging, 
especially  considering  the  experimental  and  preliminary  nature  of  the  software. 

There  are  essentially  two  direct  applications  of  singular  values  to  the  BDBP  pro¬ 
blem,  which  provide  bounds  for  u: 

1)  Ignore  the  block-diagonal  structure  and  compute  o(M).  This  gives  an 
upper  bound  for  u> 

2)  Treat  each  perturbation  one  at  a  time.  Compute  the  largest  maximum  sin¬ 
gular  value  for  each  of  the  corresponding  diagonal  blocks.  This  gives  a 
lower  bound  for  v. 


ETT 


.-•.A 


-  .  -  t 'i  •  ; 


5.2  Robustness  Analysis:  The  Small  u  Theorem 

The  preceding  discussion  of  u  and  the  BDBP  problem  has  dealt  with  determining  the 
size  of  the  minimum  structured  perturbation  A  that  causes  I  MA  to  be  nonsin-  gular. 
We  are  interested  in  using  the  structured  singular  value  to  answer  robustness, 
sensitivity,  and  performance  questions  for  multivariable  feedback  systems.  The  con¬ 
nection  between  u  and  these  essential  feedback  properties  is  provided  by  the  Small  u 
Theorem,  which  characterizes  the  stability  robustness  properties  of  a  feedback  system 
with  respect  to  block-diagonal  perturbations.  In  order  to  state  the  Small  u  Theorem 
we  need  the  following  additional  definitions  depending  on  K; 


X,  =.  (  AcH  1  A(jo)cXVo) 
r  • 


(5.7) 


Thus  X  is  the  set  of  all  H  transfer  functions  which  are  block-diagonal  with  the 

r  • 

structure  defined  by  K.  Let  BX,  =  BH_  X,. 

r  ®  E 


Now.  consider  the  system  in  Figure  3-1  and  equation  (3.1)  with  AcBX  .  This  is 
Case  4  of  Table  3-1.  Define  stability  in  this  case  to  be  equivalent  to  I-Pj^j^A 
nonsingular  in  the  closed  right-half-plane.  This  is  stronger  than  bounded-input- 
bounded-output  stability,  but  the  following  theorems  apply  equally  well  to  either 
notion  of  stability.  Although  u  is  not  a  norm,  abuse  rotation  and  let 


IIMII  -  sup  u  (M(ju)) 
u 

Theorem  5.1  (Small  u) :  The  system  in  (3.1)  is  stable  for  all  AcBXc,  iff 

IIP,,  II  <1 
11  u  “ 


(5.8) 


Proof :  To  prove  the  if  part,  suppose  1  and  let  AcBX^,  then  using  proper-  ties  3 
and  11  and  the  definition  of  X 

sup  p(P  A)  -  sup  p(P-  A)  <  sup  w(P  ■^)  .  w_<l. 

Re8>0  s-iu  8-3U 


Thus  I  *  nonsingular  for  all  Res  0.  Since  A  was  arbitrary,  the  canonical 

system  is  stable  for  all  AcBX^. 

Conversely,  suppose  utPn )  1  >  1  be»).  Then  BAcBXp  such  that 

XI  O  ^ 

0 


det(I  +  P,,A)  I  *  0.  Thus.  3AcBX,.>.  det(I  +  MA)  =  0  and  the  canonical 

XX  E  UsQ 

0  0 

system  is  not  stable  for  all  AcBX^.  □ 


This  theorem  guarantees  that  if  is  less  than  1  at  every  frequency,  then 

the  system  is  stable  for  all  structured  perturbations  Hex.  Conversely,  if  m(P^^) 
is  greater  than  or  equal  to  1  at  some  frequency,  then  there  exists  a  structured  per¬ 
turbation  HeBX^  that  results  in  instability. 


5.3  Performance  Implications 

As  noted  in  Section  4,  the  Small  m  Theorem  can  also  guarantee  a  pre-specif led  per¬ 
formance  level  by  Including  a  performance  block  in  the  BDBP  problem.  Furthermore, 
this  performance  level  is  guaranteed  for  all  structured  perturbations  WeX.  These 
claims  are  made  precise  by  a  corollary  to  the  Small  u  Theorem  that  treats  performance. 


Consider  the  system  in  Figure  3-2  and  equation  (3.1)  with  AcBX^.  Suppose  a  per¬ 
formance  specification  is  given  as 

Itelij  <  1  for  all  liull^  <  1  and  all  AcBX^ 


From  (2.10)  this  is  equivalent  to  requiring  that 


AcBX^  “  ‘’22  *  '’21  ^2  "a.  1  1 


This  is  Case  5  of  Table  3-1. 
Define 


■^1 

^12 

p 

P 

L  21 

22. 

(mj^.i 

"*2' 

X.J,  =  {A  =  diag  ( )  I  cX^. .  A^c  RH__  ^  ‘■^1 

BX„  =  X„/1BH 
T  T '  00 

where  p  is  the  dimension  of  P22'  remainder  of  this  section,  let  u  be  defined 

in  terms  of  K,^.  Then  the  following  theorem  gives  the  relationship  between  robust 
performance  and  the  SSV. 

Theorem  5.2  (Robust  Performance) 

The  performance  requirement  (6.9)  is  satisfied 

iff  IIPII^  <  1 

Proof :  Repeated  application  of  the  Small  u  Theorem  yields 

U(P( jo))  <1  V  u 

iff  det(I-PA)  >  q,  VRes  >0  V  Ae  X,j, 

iff  det(I-P^^A^)  det(I-(P22+P^2^1<^-Pll*l>”^P21>*2^  ^  ° 


VRes  >  0 
„  ..-1, 


iff 

«  <P22*P21^<'-'’ll^> 

iff 

AeBX^  "'’22*‘’l2^^^''’ 

VA-eBX,.  A,€BH 
1  r  2  * 


VRes  >  0 


VAcBX. 


~  I  iiTiT  a 


We  note  that  this  theorem  extends  the  Small  u  Theorem's  robust  stability  results 
to  a  composite,  simultaneous  result  on  robust  stability  and  performance.  Thus,  given 
an  uncertain  plant  model  with  structured  perturbations  and  a  performance  specification, 
we  have  a  necessary  and  sufficient  condition  in  terms  of  u  for  satisfaction  of  the 
performance  spec  in  the  face  of  the  uncertainty.  If  the  condition  u  <  1  is  met,  then 
the  desired  performance  is  achieved  for  all  perturbed  plants.  If  u  >  1.  then  there 
exists  a  structured  perturbation  which  causes  the  performance  spec  to  be  violated 
The  robust  performance  condition  may  be  thought  of  as  arising  from  an  equivalent 
"fictitious  uncertainty,"  although  this  Interpretation  is  not  necessary. 

6.  CONCLUDING  COMMENTS 

This  paper  outlined  an  analysis  technique  based  on  the  Structured  Singular  Value  u 
for  linear  feedback  systems  that  provide  a  reliable,  nonconservative  measure  of 
performance  in  the  face  of  structured  uncertainty.  The  Small  u  Theorem  gives  a 
necessary  and  sufficient  condition  in  terms  of  u  for  stability  of  a  linear  system  with 
multiple,  simultaneous,  norm-bounded  perturbations  of  fixed  but  arbitrary  struc¬ 
ture.  The  Robust  Performance  Theorem  provides  a  similar  condition  for  the  satisfac¬ 
tion  of  performance  specifications  in  the  presence  of  structured  perturbations.  These 
results  have  great  potential  for  application  to  Large  Space  Structure  Control  Pro¬ 
blems.  Further  research  is  in  progress  to  realize  this  potential. 
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Figure  2-1.  Feedback  Configuration  for  the 
Small  Gain  Theorem 


MHC«C  >)  > 


Figure  2-2.  Three  Equivalent  Representations  of 
the  Feedback  configuration  involving 
operator  G  and  sector  (C.  L,  R) 
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TABLE  3~1.  ANALYSIS  SUMMARY 


•  COMMANDS:  POINTING,  TNACKING.  SHAPE  CONTROL 

•  DISTURBANCES  AND  NOISES: 

-  AERODYNAMIC 

-  GRAVITY  GRADIENT 

-  THERMAL 

•.  REACTION  WHEEl/CONTROL  MOMENT 
GYRO  IMBALANCES  AND  NOISE 

•  PERTURBATIONS: 

-  ACTUATOR/SENSOR  UNCERTAINTY: 

HIGH  FREOUENCY  DYNAMICS 
RESIDUALJET  IMBALANCES 

-  UNMOOELLEO  STRUCTURAL  DYNAMICS 

-  STRUCTURAL  UNCERTAINTY  •  MASS,  STIFFNESS,  DAMPING 

-  STRUCTURAL  CHANGES 

TABLE  3-2.  LSS  UNCERTAINTY 


-  SENSOR  NOISE 

-  SOLAR 

-  EARTH  MAGNETIC 

-  REACTION  JET  LEAKAGES 


Figure  3-lb.  Analysis  Model 


Figure  3-lc.  Synthesis  Model 
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Figure  3-2.  LSS  Uncertainty  Model 
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Figure  4-1.  Feedback  Loop  as  a  BDBP  Problem 


Figure  4-2.  Feedback  Loop  with  Two  Uncertainties 
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SUMMARY 

■This  paper  presents  some  results  found  during  the  investigation  of  control  problems 

of  large  flexible  spacecraft  .  A  triple  plate  configuration  of  such  a  spacecraft  is 
defined  and  studied.  The  model  is  defined  by  modal  data  derived  from  finite  element 
modelling.  The  order  reduction  methods  applied  are  briefly  described  and  results  of  order 
reduction  are  presented.  An  attitude  control  concept  with  low  and  high  authority  control 
has  been  used  to  design  an  attitude  controller  for  the  reduced  model.  The  stability  and 
response  of  the  original  system  together  with  the  reduced  controller  is  analysed. 


1 .  INTRODUCTION 

For  spacecraft  built  up  to  now  attitude  control  systems  and  technologies  have  been 
developed,  which  establish  conventional  basics  for  the  development  of  future  spacecraft 
Conventional  spacecraft  could  be  conceived  as  rigid  body  or  as  rigid  body  with  flexible 
appendages.  The  space  transportation  system,  together  with  Rendevous  &  Docking,  makes 
it  possible  to  think  of  large,  more  complex  platforms/antennas  or  orbital  carriers.  The 
increase  in  size  involves  a  higher  level  of  mechanical  flexibility  than  in  conventional 
spacecraft.  For  the  achievement  of  the  objectives  of  demanding  future  missions  the 
problem  of  spacecraft  structure  and  control  interaction  has  a  very  high  significance. 
The  increase  in  size  and  flexibility  is  often  combined  with  higher  requirements  for 
shape  and  attitude  control.  Characteristics  of  large  flexible  spacecraft  with  relevance 
for  the  control  problem  are  e.g. 

Distributed  parameter  systems  with  theoretically  infinite  dimension  and  high 
dimension  in  practical  approximations 

Relatively  uncertain  design  models  because  of  limited  on-earth  testing 
Many  low  resonant  frequencies  and  very  light,  poorly  known  damping 

stringent  accuracy  requirements  which  require  a  control  system  bandwidth  close 
to  or  above  the  lowest  structural  frequencies. 

The  control  design  for  large  flexible  spacecraft  therefore  has  to  cope  with  high  order 
systems  with  a  variety  of  sensors  and  actuators,  uncertain  control  plant  parameters  and 
hardware  limitations,  such  as  control  device  design  and  small  on  board  computers.  The 
attitude  control  designer  also  has  to  consider  the  extreme  relation  to  structural 
mechanics.  This  paper  concentrates  on  theoretical  aspects  of  the  attitude  control  pro¬ 
blem  of  large  flexible  spacecraft.  It  reports  on  baseline  investigations  for  the  test 
and  comparison  of  design  approaches  and  techniques. 


2 .  STUDY  APPROACH 

The  objectives  of  the  study  carried  out  are  the  investigation  of  control  problems 
of  large  flexible  spacecraft  and  the  identification  of  basic  problems  that  will  be  stu¬ 
died  experimentally.  The  first  steps  have  been  the  analysis  and  definition  of  require¬ 
ments  for  the  attitude  control  design  and  the  dynamics  model  set  up.  Then  order  reduc¬ 
tion  methods  have  been  applied  to  test  the  reduction  methods  and  to  achieve  reduced 
order  models.  The  next  step  is  the  controller  design  itself,  but  it  is  clear  that  order 
reduction  and  controller  design  have  to  be  seen  as  elements  of  an  iteration  loop,  in 
order  to  come  to  a  final  reduced  order  controller.  The  design  is  finished  by  a  perfor¬ 
mance  evaluation  and  critical  assessment  of  the  designed  systems  and  the  design  methods 
applied.  The  identification  of  basic  problems  leads  to  the  definition  of  an  appropriate 
test  set  up  and  test  program  to  study  those  problems  experimentally.  Fig.  2-1  shows  the 
study  task  flow  in  phase  1.  The  study  is  still  under  work.  This  paper  presents  results 
found  up  to  the  major  part  of  the  controller  design  task. 


*This  work  has  in  main  parts  been  done  under  ESA  contract  5310 
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FIG.  2-1:  STUDY  TASK  FLOW  PHASE  1 


DISTRIBUTED  FLEXIBILITY  MODEL 


Three  models  were  used  as  reference  spacecraft  in  the  studies.  The  models  do  no 
represent  real  or  planned  spacecraft,  but  they  are  representative  for  the  characteristics 
which  play  a  role  in  the  design  of  attitude  control  systems  for  future  large  spacecraft. 
The  simplest  model  is  a  free  beam.  The  second  model  has  been  proposed  in  the  literature 
as  a  generic  model.  It  is  a  flat  plate  with  a  rigid  centre  body  and  has  been  developed 
at  Purdue  University.  The  third  model  is  constructed  of  three  coupled  plates  with  the 
goal  to  have  a  spacecraft  with  nonhomogeneous  flexibility.  This  three  plate  model  pro¬ 
ved  to  be  the  most  interesting  model,  giving  the  most  design  problems.  We  will  there¬ 
fore  concentrate  on  this  model.  The  model  consists  of  a  central  plate,  having  higher 
stiffness  and  mass  density,  which  is  coupled  to  two  indentical  plates  with  lower 
eigenfrequencies.  The  modal  data  of  this  triple  plate  configuration  has  been  devived 
from  a  finite  element  model.  The  physical  size  is  100  m  by  150  m.  Each  of  the  three 
plates  has  a  width  of  50  m. 

The  thickness  of  the  inner  plate  is  set  to  2  m,  wheras  the  outer  plates  are  1  m 

2  2 

thick.  The  elasticity  modules  is  2.  E5  N/m  for  the  outer  plates  and  7.  E5  N/m  for  the 

centre  plate.  The  mass  density  is  2  kg/m  .  These  values  are  quite  arbitrary.  They  have 
been  selected  in  order  to  get  densly  packed  frequencies  starting  at  about  0.02  Hz. 

From  the  40  element  model  with  171  degrees  of  freedom  the  following  20  lowest  eigenfre¬ 
quencies  were  found: 


Omega  [rad/s 


Frequency  [Hz] 


4 

0.  1  39 

0.022 

5 

0.146 

0.023 

6 

0.269 

0.043 

7 

0.281 

0.045 

8 

0.292 

0.047 

9 

0.311 

0.050 

10 

0.483 

0.077 

1  1 

0.628 

0.100 

1  2 

0.668 

0.106 

1  3 

0.763 

0.121 

14 

0.793 

0.126 

1  5 

0.972 

0.155 

16 

1  .001 

0.159 

1  7 

1.173 

0.187 

18 

1  .  243 

0.198 

1  9 

1  .259 

0.200 

20 

1 .459 

0.232 

table  3-1:  EIGENFREQUENCIES  OF  THE  DISTRIBUTED  FLEXIBILITY  MODEL 

Plots  of  those  nine  modes  which  were  identified  as  dominant  are  presented  in  Fig 

3-1  to  3-3.  Input/Output  transfer  functions  of  the  model  arc 

evaluated  directly  from 

the  eigenvalue  and  eigenvector  solutions  of  the  free-free  structure  as  shown  below  in 

(1 )  to  (3)  ,  see 

ref .  1  . 
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where  y:  measurement  vector 
u:  control  vector 
dist:  disturbance  vector 
NMR:  number  of  retained  modes 
C^:  modal  damping 

fj^:  modal  frequency  ((ij^=2irf 
CP^(k)  is  defined  by: 

CP^(k)  Ads^(k);  k=1 , . . . NC , i=1 , 

“mT 

1 


•  NMR 


(4) 


ds^(k)  is  the  i'th  mode's  displacement  at  sensor  station  k;  M.  is  the  i ' th  mode's 
generalized  mass.  ^ 


B^(j)  and  DIST^(l)  are  defined  by 

B^(j)  A  da^(j)  j=1,...NB; 

i=1 , . . .NMR; 

DIST^(l)  A  da^(l)  1=1 .NDIST; 

i=1 , . . .NMR; 


(5) 


(6) 


where  da^(j),  da^(l)  are  the  i'th  mode's  displacements  at  actuator  station  j  and 
disturbance  station  1  respectively. 

The  CDj^(k)  terms  in  (2)  and  (3)  are  used  for  rate  type  sensors  and  are  defined  as  in 
(4)  if  rate  sensor  signals  are  to  be  modelled. 

Equation  (2)  and  (3)  may  be  written  in  modal  form  by  defining  proportional  and 
derivative  modal  gains: 


CPU^(k, j) 

A 
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The  transfer  function  (1)  with  T^  and  T^^^^  expressed  as  in  (11)  and  (12)  consists 

of  parallel  second  order  terms  with  resonant  frequencies  according  to  the  eigenf requen- 
cies  and  weight  factors  according  to  the  modal  gains.  The  transfer  function  can  be 
expressed  in  state  space  form  by  decoupled  second  order  state  space  formes  for  each  mode. 
Hence  the  system  matrix  consists  of  a  band  of  2  by  2  matrices  along  their  diagonal. 

So  far  each  node  of  the  structural  model  can  be  defined  as  input  or  output  station. 
For  the  use  of  the  model  in  the  studies  different  sensor/actuator  stations  have  been 
defined.  The  following  configuration  proved  t  be  most  reasonable: 


r;  v-__  r  ^ 


.  Rotation  sensor  X,y  at  the  centre  node 

.  Translation  sensors  z  and  force  actuators  z  at  the  edges  of  the  outer  plates 


The  centre  node  is  considered  as  a  reference  for  attitude  control. 


4.  ORDER  REDUCTION 

The  idea  of  order  reduction  is  to  try  to  approximate  a  system  of  high  order  by  a 
lower  order  system  in  order  to  ease  the  simulation,  analysis  and  controller  design.  The 
design  based  on  a  reduced  order  system  may  also  be  less  costly  and  reduces  the  controller 
order,  which  may  be  important  for  the  implementation  in  the  control  computer  aboard  a 
spacecraft.  The  methods  for  order  reduction  of  state  representations  may  be  classified 
into  four  groups: 

minimization  of  output  error 
minimization  of  equation  error 
modal  reduction 
singular  perturbation. 

The  finite  element  model  itself  is  already  a  reduced  model  and  the  original  system 
order  is  determined  by  the  number  of  eigensolutions  computed  from  the  FEM.  In  our  case 
the  original  order  is  40.  The  mathematical  methods  of  order  reduction  are  then  applied 
to  this  40th  order  system.  Since  our  model  is  based  on  modal  data  it  appears  reasonable 
to  use  modal  methods  for  order  reduction. 

4 . 1  Modal  Gain  Considerations 

In  section  3  the  transfer  function  of  the  model  has  been  expressed  in  form  of  paral¬ 
lel  second  order  oscillators.  Each  oscillator  represents  the  contribution  of  a  mode  to 
the  input/output  transfer  function.  The  weight  is  represented  by  the  modal  gains  (7)  to 
(10).  From  this  consideration  it  is  possible  to  select  those  modes  which  contribute  most 
to  the  transfer  function  as  dominant  and  keep  them  in  a  reduced  order  model.  Modes  which 
contribute  little  are  neglected.  This  approach  has  been  used  for  a  reduced  model  of  the 
Spacelab  Instrument  Pointing  System  /  ref.  1  /. 

In  simulation  models  for  disturbance  response  analysis  the  modal  gains  in  (11)  and  (12) 
should  be  considered,  but  for  control  studies  only  the  modal  gains  from  control  input 
to  output  are  relevant. 

4 . 2  Litz '  Modal  Approach 

Modal  approaches  to  order  reduction  require  a  transformation  of  the  original  system 
to  the  Jordan  canonical  form  and  take  only  the  dominant  eigenvalues  of  the  original  model 
into  a  reduced  model.  Methods  have  been  developed  since  the  mid  sixties.  The  techniques 
of  E.J.  Davison,  S.A.  Marshall  and  M.R.  Chidarabara  in  their  original  versions  have  some 
shortcomings,  which  have  been  avoided  by  a  newer  technique  of  L.  Litz  (ref.  2).  In 
reference  3  a  unified  derivation  and  critical  review  of  modal  approaches  has  been  given. 
Litz'  technique  is  shown  to  be  both  highly  accurate  and  powerful.  Therefore  this  techni¬ 
que  has  been  selected  for  application  to  the  flexible  spacecraft  model.  Litz'  method 
links  modal  techniques  to  least  square  reduction  techniques.  It  gives  an  explicit  formu¬ 
lation  for  the  reduced  model  and  is  optimal  in  the  sense  that  it  minimizes  the  weighted 
integral  of  the  square  of  the  deviations  between  the  original  and  the  reduced  model. 

The  original  states  are  sorted  such  as  to  have  the  relevant  states  in  a  subvector 


+  B  u 


The  relevant  states  may  be  identified  by  their  physical  meaning  or  it  may  be  the 
states  which  contribute  to  the  output  vector: 

y  =  [C,  O)  X,  (14) 

The  reduced  model  is  an  approximation  of  the  substates  x^ : 

x^  =  Aj^  x^  +  Bjj  u.  (15) 

As  for  all  modal  methods  the  original  system  (13)  is  transformed  by: 
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X  =  V  ■  z  = 


to  Jordan  canonical  form 
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B*  =  V-1  B. 


Now  again  the  transformed  state  vector  is  reordered  s 

dominant  part,  found  by  certain  dominance  measures.  The  st 
is  shown  in  Fiq.  4-1. 
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REDUCED  MODEL  OF  LITZ 


The  matrix  E  is  determined  such  that  the  following  performance  index  is  minimized; 


r 

1  =  1 

i  =  1 


7  /  H  (t)  /' 


dt 


with  (t)  =  (t)  -  Z2^  (t) 

r  number  of  inputs 

The  index  i  indicates  that  only  the  i-th  input  is  excited  by  a  unity  step.  Tlie  weight 
factors  allow  different  weighting  of  the  system  inputs. 

The  optimization  problem  can  be  solved  explicitly  for 


E  (B*,  A 


‘1 
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The  solution  also  guarantees  stationary  accuracy  by 


^i 


»)  =  O  for  i  =  1  ,r. 


Litz  has  also  proposed  a  method  of  generating  a  dominancy  measure.  This  measure  does  not 
only  take  into  account  the  stability  of  the  eigenvalue,  i.e.  its  distance  to  the  imaginary 
axis,  but  in  addition  its  controllability  and  observability  characteristics.  To  keep  the 
presentation  clear  a  single  input  single  output  system  with  single  eigenvalues  ..., 

is  considered.  The  state  space  description  in  Jordan  canonical  form  is 


z  =  A  z  +  b*  u 

y  = 


3t  . 

C  Z 


X 

The  vector  elements  b.  and  c.  determine  the  controllability  and  observability  of  the 
system.  ^ 

For  bT  =  O  the  eigenmotion  z.  is  not  controllable  with  u,  and  for  c*  =  0  it  is  not  obser- 
vable^from  y.  The  unity  step^response  can  be  expressed  as 


n 

y  =  ^ 

k=1 


From  this 
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can  be  taken  as  a  measure  of  the  influence  of  eigenvalue  on  the  dyneimic  behavior  of 

the  system.  The  definition  of  the  equivalent  measure  for  multiple  input  multiple  output 
systems  is  easy,  considering  each  signal  path  from  input  u^  to  output  y ^ : 


*ijk 
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If  this  q, ..  is  related  to  the  stationary  value  y. ,  the  dimensionless  value 

=  l'3lkj( 
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gives  a  measure  how  the  response  y^^j  (t)  is  influenced  by  the  eigenvalue  Xj^.  As  a  first 
criterion  it  can  be  stated  that  eigenvalues  with  small  r...  are  not  dominant  within  the 

i  ]  K 

path  (i,j).  However  also  eigenvalues  with  high  r...  can  be  not  dominant,  if  dynamic 

1  j  X 

compensation  occurs.  The  compensation  can  be  seen  from  small  values  of  the  amplitude 
/Gij  (j/Xj^/)/.  Therefore  the  measure  is  multiplied  by 


Ai-  (Xj^) 


/Gi-  ij/Xy./)/ 
/Gj^.  (o)/ 


The  weighted  dominancy  measure  becomes 
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A  dominance  measure,  which  also  reflects  that  the  output  is  influenced  differently  from 
the  Inputs,  which  may  also  have  different  amplitudes,  can  be  defined  either  by 


Flex.  Mode  No. 


ujj^  [ rad/s J  Modal  Gain/uj^ 


0.139 
0.146 
0.269 
0.311 
0.281 
0.292 
0.483 
0.763 
0.668 
0.793 
0.972 
1  .243 
1  .259 
0.628 
0.972 
1.173 
1  .459 


1 .8865  E'2 
8.5103  E'3 
5.3749  E-3 
5.3658  E-3 
3.2024  E-3 
3.1510  E-3 
2.8903  E-3 
1 .4389  E-3 
1.4123  E-3 
1 ,2404  E-3 
9.9164  E-4 
8.9368  E-4 
7.5801  E-4 
6.2639  E-4 
5.7491  E-4 
3.75583E-4 
1 .4874  E-4 


TABLE  4-1:  DOMINANCY  ORDER  DERIVED  BY  MODAL  GAIN  CONSIDERATION 

The  question  now  is  how  much  modes  shall  be  retained.  From  Table  4-1  it  can  be  seen  that 
the  measure  decays  rapidly  from  the  highest  value  down  to  about  the  8th  or  9th.  If  more 
modes  would  be  taken  into  the  reduced  model  then  it  becomes  more  difficult  to  separate 
dominant  from  nondominant  modes,  because  the  measure  is  very  close  for  all  modes.  There¬ 
fore  it  seems  reasonable  to  retain  the  first  9  Modes  of  Table  4-1. 

The  results  of  the  dominancy  analysis  using  Litz'  technique  are  presented  in  Table  4-2. 

It  gives  the  dominancy  measures  Mj^,  with  respect  to  controllability/observability  and 

Mj^  S|^  with  respect  to  the  transfer  behavior.  As  for  the  modal  gain  the  measures  decay 

rapidly  for  the  most  dominant  nine  modes.  This  seems  to  be  a  rational  to  take  nine 
elastic  modes  into  the  reduced  model.  The  ranking  of  modes  is  different  for  all  dominancy 
measures,  but  the  nine  dominant  modes  are  the  same  for  the  modal  gain  method,  for  and 

Sj^,  Table  4-3  compares  the  ranking  of  the  retained  modes.  Reduced  models  with  less  than  9 

modes  were  not  satisfying  in  response  analysis  and  during  the  design  of  active  vibration 
damping. 
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Eigenvalues 

Contr . /Obser . 

Dominancy 

I/O  Transfer 

Dominancy 

fiEAL 

I  MAG 

MAXIMUM 

SUM 

MAXIMUM 

SUM 

-0.0007 

0.1386 

0.0163 

0.5193 

4.3135 

72.9620 

-0.0007 

-0.1386 

0.0163 

0.5193 

4.3135 

72.5620 

-0.0007 

0.1462 

0.0078 

0.3539 

3.3939 

43.1744 

-0.0007 

-0.1462 

0.0078 

0.3539 

3.3939 

43.1744 

-0.0013 

0.2688 

0.0431 

0.6362 

8.0551 

100.0000 

-0.0013 

-0.2688 

0.0431 

0.6362 

8.0551 

100.0000 

-0.0014 

0.2811 

0.0290 

0.2554 

10.5785 

75.4626 

-0.0014 

-0.2811 

0.0290 

0.2554 

10.5785 

75.4626 

-0.0015 

0.2922 

0.0044 

0.1932 

2.4384 

20.2673 

-0.0015 

-0.2922 

0.0044 

0.1932 

2.4384 

20.2673 

-0.0016 

0.3110 

0.0531 

0.3124 

7.0587 

31.8490 

-0.0016 

-0.3110 

0.0531 

0.3124 

7.0587 

31.8490 

-0.0024 

0.4830 

0.0058 

0.1509 

8.7702 

51.9795 

-0.0024 

-0.4830 

0.0058 

C.1509 

8.7702 

51.9795 

-0.0031 

0.6279 

0.0054 

0.0691 

0.4246 

3.1283 

-0.0031 

-0.6279 

0.0054 

0.0691 

0.4246 

3.1283 

-0.0033 

0.6685 

0.0028 

0.1223 

2.0986 

13.9860 

-0.0033 

-0.6685 

0.0028 

0.1223 

2.0986 

13.9860 

-0.0038 

0.7630 

0.0109 

0.1713 

2.1727 

15.8973 

-0.0038 

-0.7630 

0.0109 

0.1713 

2.1727 

15.8973 

-0.0040 

0.7934 

0.0011 

0.0317 

0.0189 

0.3278 

-0.0040 

-0.7934 

0.0011 

0.0317 

0.0189 

0.3278 

-0.0049 

0.9716 

0.0011 

0.0206 

0.3547 

2.0379 

-0.0049 

-0.9716 

0.0011 

0.0206 

0.3547 

2.0379 

-0.0050 

1.C006 

0.0057 

0 . 0886 

0.1431 

1.7979 

-0.0050 

-1.0006 

0.0057 

0.0886 

0.1431 

1.7979 

-0.0059 

1.1733 

0.0042 

0.0452 

0.1497 

1.2123 

-0.0059 

-1.1733 

0 . 0042 

0.0452 

0.1497 

1.2123 

-0.0062 

1.2432 

0.0018 

0.0291 

0.7894 

4.7212 

-0.0062 

-1.2432 

0.0018 

0.0291 

0.7894 

4.7212 

-0.0063 

1.2589 

0.0015 

0.0377 

0.5670 

3.4694 

-0.0063 

-1.2589 

0.0015 

0.0377 

0.5670 

3.4694 

-0.0073 

1.4587 

0.0002 

0.0088 

0.0049 

0.0412 

-0.0073 

-1.4587 

0.0002 

0.0088 

0.0049 

0.0412 
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FIG.  4-3:  RATE  AT  INNER  EDGE  OF  OUTER  PLATE 
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FIG.  4-4:  RATE  AT  OUTER  EDGE 

Unfortunately  the  generation  of  an  optimally  reduced  model  by  Litz'  technique  was  not 
successful!.  In  order  to  achieve  the  presumed  system  description  (13)  and  (14)  the 
original  model  has  been  transformed  such  that  the  output  vector  becomes  part  the  state 


vector,  i.e.  C, 


(14)  becomes  a  unity  matrix.  The  problem  arose  then  from  the  trans¬ 


formed  original  system.  First  the  resulting  Jordan  canonical  form  was  too  inacurate 
for  numerical  reasons,  such  that  the  reduced  models  derived  from  the  canonical  form  had 
wrong,  partially  unstable,  eigenvalues.  This  could  be  solved  by  application  of  a  better 
transformation  scheme,  however  the  computation  of  the  optimal  matrix  E  for  reconstruc¬ 
tion  of  the  neglected  state  variables  failed. 

The  dominancy  measures  of  Litz  proved  to  be  a  good  tool  for  the  selection  of  eigenvalues 
to  be  retained,  but  the  flexible  spacecraft  model  could  not  be  reduced  optimally  in  the 
sense  of  Litz.  Since  the  algorithm  has  given  good  results  in  many  cases,  the  flexible 
spacecraft  model  seems  to  be  a  really  critical  system  for  Litz'  technique. 
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5. 


REQUIREMENTS  FOR  CONTROLLER  DESIGN 


In  a  theoretical  study  on  control  design  techniques  it  is  difficult  to  define  re¬ 
quirements  which  are  design  drivers.  In  practical  design  cases  mainly  the  performance 
requirements  disturbances  and  realization  constraints  determine  the  basis  on  which  a 
control  system  is  designed  and  verified.  An  accuracy  requirement  can  often  also  be 
formulated  as  a  control  system  bandwidth  requirement.  In  the  context  of  elastic  modes 
of  the  plant  model  the  design  bandwidth  is  an  important  factor.  Problems  can  be  expec¬ 
ted  if  the  control  bandwidth  is  close  to  the  structural  eigenf requencies ,  or  if  even 
eigenfrequencies  of  the  plant  fall  within  the  control  bandwidth.  To  analyse  these 
problems  a  control  system  bandwidth  in  the  range  of  the  lowest  structural  eigenfrequen¬ 
cies  has  been  set  as  a  design  requirement  for  the  attitude  control.  The  controller 
complexity  is  another  critical  area  with  respect  to  implementation  on  flight  computers, 
number  of  sensors/actuators  and  so  on.  As  a  general  requirement  the  controller  complexity 
should  be  kept  to  a  minimum  and  a  controller  xmplementation  with  microprocessor  based 
electronics  should  be  possible. 

6.  CONTROLLER  DESIGN 

Based  on  the  experience  that  control  problems  with  elastic  modes  are  largely  reduced 
with  increased  damping  and  based  on  results  in  other  studies,  the  controller  is  separated 
in  two  tasks: 

Low  Authority  Control  (LAC)  fcr  vibration  damping 
High  Authority  Control  (HAC)  for  attitude  control. 

The  LAC  is  designed  to  increase  modal  damping  by  velocity  feedback.  As  a  design  goal  the 
modal  damping  should  be  at  least  5%  due  to  the  LAC.  The  LAC  design  has  been  done  by 
Dr.  G.  Schulz  at  DFVLR.  It  is  based  on  a  dissipation  energy  minimization  approach.  The 
LAC  gains  L  for  local  feedback  of  the  velocities  at  the  edges  of  the  outer  plates  have 
been  derived  using  the  original  model.  The  design  goal  of  5%  damping  of  each  mode  has 
been  reached. 

The  HAC  design  is  done  for  the  reduced  model  with  LAC: 

Reduced  model  x^^  =  A^  Xj^  +  u 

Velocity  measurements 

LAC  u^  =  -L  y^ 

The  control  plant  for  the  HAC  design  then  becomes 
’‘N  “  **N  “  ®N  ^  ^LN^  ^N  ^  “h 

y  =  Cfj  . 

The  controller  for  this  system  consists  of  a  state  estimator  and  a  linear  feedback 
control  law 


The  state  estimator  has  the  form 

^N  "  “  ®N  ^  ^LN  “  ^  ^N  “  ^N  ’^N  ^ 

Xj^  (O)  =  0. 

The  estimator  gains  G  are  determined  as  stationary  Kalman  f ilter^gains .  The  control  gains 
k  are  determined  as  if  the  state  x^^  would  be  present  instead  of  x^.  The  steady-state 
regulator  approach  is  used  with  a  quadratic  performance  index 

00 

J  =  /  (X^  Q  Xjj  +  U^  R  U„)  dt  . 

o 

The  weighting  matrix  R  is  set  to  unity  and  the  matrix  Q  is  set  as  a  diagonal  matrix.  The 
elements  of  Q  are  chosen  such  as  to  achieve  closed  loop  eigenvalues  of  the  rigid  body 
rotation  above  the  first  two  flexible  modes.  No  increase  in  damping  of  the  flexible 
modes  by  HAC  has  been  required.  The  setting  of  the  Q  matrix  to  acliicve  the  desired 
eigenvalues  is  easily  done  with  few  iterations  because  the  relation  between  eigenvalues 
and  states  is  known  from  the  special  model  structure. 

The  observability  and  controllability  conditions  have  to  be  observed  in  the  design. 
Finally  the  HAC  and  observer  for  the  reduced  system  have  to  be  coupled  to  the  original 
model  in  order  to  evaluate  stability  when  spillover  from  neglected  modes  is  present. 

In  a  first  step  the  HAC  has  been  designed  without  LAC.  The  original  system  is  stable, 
i.e.  the  neglected  modes  do  not  affect  stability.  This  result  confirms  the  proper 
choice  of  dominant  modes  to  be  retained  in  the  reduced  model.  The  elastic  modes  however 
are  still  lightly  damped.  Fig.  6-1  shows  the  rotation  of  the  centre  about  x  after  1 
degree  initial  attitude  deviation.  The  slow  oscillation  is  the  bending  mode  5.  Fig.  6-2 
shows  the  rotation  of  the  centre  about  y  after  0.65  degrees  initial  attitude  deviation. 


FIG.  6-2:  0y  RESPONSE  OF  THE  CENTRE  WITH  HAC  ONLY 

The  next  step  was  to  include  LAC  into  the  HAC  design  as  described  above.  The  resulting 
HAC  gains  are  slightly  lowered.  The  damping  of  higher  modes  is  increased,  but  the  slow 
modes  get  only  slightly  higher  damping.  The  initial  increase  in  damping  by  LAC  is 
decreased  by  the  attitude  controller.  The  actuator  amplitudes  are  reduced  and  the 
responses  become  smoother.  Fig.  6-3  shows  the  response  like  Fig.  6-1  but  now  with  LAC, 
The  bending  mode  5  still  dominates.  Fig.  6-4  presents  the  0^  response  as  Fig.  6-2  but 

now  with  LAC.  In  this  response  the  smoothing  effect  is  obvious.  The  higher  modes  are 
well  damped,  only  the  slow  mode  4  remains  visible. 
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Summary 

'For  the  design  of  low  authority  controllers  for  attitude  control  of  flexible  spacecraft 
a  new  method  based  on  numerical  optimization  is  presented.  Thereby  a  dominant  criterion 
to  be  optimized  is  determined,  and  the  design  requirements  are  formulated  as  constraints. 
Two  different  criteria  are  investigated:  first  a  dissipation  energy  criterion  is  maximized 
and  second  a  control  energy  criterion  is  minimized.  The  method  is  applied  for  attitude 
controller  design  of  two  models,  the  "Draper  Model  No.  I"  and  the  "Purdue  Model".  The 
first  represents  a  flexible  tetrahedral  truss  structure  while  the  latter  can  be  considered 
as  model  of  a  solar  power  satellite.  Damping  requirements  for  these  models  are  formulated 
as  design  objectives  and  the  controllers  are  determined  using  the  proposed  method.  The 
achieved  results  show  that  due  to  the  now  existing  efficient  optimization  software,  con¬ 
troller  design  via  numerical  optimization  is  an  useful  and  flexible  tool  for  system  design. 
This  flexibility  arises  from  the  fact  that  arbitrary  design  criteria  can  be  implemented. 

1 .  Introduction 

Future  space  missions  like  large  communication  platforms,  orbital  carriers,  advanced 
space  processing  facilities  and  solar  power  systems  require  large  light  weight  structures. 
Size  and  flexibility  of  these  space  structures  will  require  new  shape  and  attitude  control 
systems . 

These  large  flexible  spacecrafts  are  mainly  two  or  three  -  dimensional  truss  structures. 

For  the  determination  of  the  dynaipic  behaviour  of  these  structures  finite  element  methods 
have  to  be  employed,  to  derive  the  eigenf requencies  and  eigenmodes.  A  great  number  of  these 
structural  modes  are  falling  within  the  control  system  bandwidth.  Therefore  specific  con¬ 
trollers  have  to  be  developed  to  fulfil  the  attitude  control  requirements. 

One  controller  design  methodology  is  to  increase  the  damping  of  the  eigenmotion  via  out¬ 
put  feedback  (low  authority  control)  in  order  to  ease  the  design  of  the  specific  attitude 
controller  (high  authority  control) .  The  low  authority  controller  design  is  performed  for 
reduced  order  models  of  moderate  dimension  and  shall  guarantee  an  improved  damping  of  the 
complete  model.  The  high  authority  controller  design  which  may  employ  special  mode  can¬ 
cellation  techniques  is  based  on  reduced  order  models  of  small  dimension  to  fulfil  the 
attitude  control  requirements. 

Here  the  low  authority  controller  design  part  is  investigated  in  more  detail.  This  low 
authority  control  design  was  first  proposed  by  Aubrun  [1]  using  perturbation  techniques. 
This  method  efficiently  allows  to  improve  the  damping  of  the  eigenmodes.  If  additional 
design  goals  as  e.g.  positioning  of  actuators  and  sensors,  minimum  gain,  lower/upper 
bounds  of  damping  have  to  be  fulfilled,  numerical  optimization  can  be  applied  sucessfully 
[2]. 

A  low  authority  controller  design  is  presented  which  is  based  on  nonlinearly  constrained 
numerical  optimization.  Thereby  the  design  requirements  are  formulated  as  constraints  of 
the  optimization.  A  dominant  optimization  criterion  has  to  be  determined,  which  supports 
the  optimization  routine  to  fulfil  the  design  requirements.  Two  different  criteria  are 
investigated  in  the  following:  first  a  dissipation  energy  criterion  is  maximized  and 
second  a  control  energy  criterion  is  minimized. 

The  investigations  are  performed  for  two  typical  models  of  flexible  space  structures.  Tlie 
first  is  a  flexible  truss  structure  known  in  the  literature  as  "Draper  Model  No.  1"  [5] 
and  the  second  is  a  flexible  plate  in  orbit  known  as  "Purdue  Model"  [4]. 

2 .  Maximization  of  Dissipation  Energy 

Low  authority  controller  design  via  maximization  of  the  dissipation  energy  is  demonstrated 
for  the  "Draper  Model  No.  1",  presented  in  the  following: 


2 . 1  "Draper  Model  No.  1" 

This  model  is  a  tetrahedral  truss  structure.  Its  design  goal  was  to  retain  many  of  the 
characteristics  of  a  typical  large  space  structure,  and  at  the  same  time,  keep  the  order 
of  the  problem  small  (less  than  20  modes).  The  resulting  model  shown  in  Fig.  2.1  meets 
these  design  requirements. 


19-2 


I 


Figure  2.1  Tetrahedral  finite-element  model 

The  structure  is  similar  to  typical  optical  or  radar  systems.  The  truss  structure  is 
supported  by  three  right-angled  bipods.  The  bipod  legs  are  pinned  to  ground,  and  all 
other  nodes  are  clamped.  The  individual  truss  members,  including  the  bipods,  have  elastic 
flexibility  in  their  axial  direction  only,  i.e.  they  can  undergo  compression  and  elonga¬ 
tion  but  no  lateral  bending.  The  four  vertices  of  the  tetrahedron  each  have  three  degress 
of  freedom,  so  that  the  entire  model  can  be  completely  represented  by  12  structural  modes, 
which  are  shown  in  appendix  C. 

The  structural  model  is  described  in  consistent,  but  unspecified  units.  The  edges  of  the 
(regular)  tetrahedron  are  each  10  units  long,  and  the  bipod  legs  are  each  Z'/f  units  long. 
(The  "horizontal"  base  of  the  tetrahedron  is  therefore  situated  2  units  above  ground, 
i.e.,  above  the  x,y  plane.)  The  top  vertex  is  defined  as  LOS  (line-of-sight) ,  and  the  six 
bipod  legs  are  defined  to  act  as  "member  dampers,"  i.e.,  active  axial  spring/dashpots , 
each  equipped  with  a  rate  and  position  sensor.  The  three  bipods  represent  therefore  6 
colocated  actuator/sensor  pairs,  each  pair  being  identified  with  a  bipod  leg.  Sensor 
measurements  and  actuator  forces  are  thus  confined  to  the  axial  elongation/compression 
motions  and  rates  of  the  bipod  legs. 

The  dynamic  behaviour  of  the  structure  is  described  by  the  second  order  vector  differen¬ 
tial  equation  of  the  generalized  coordinate  vector  ^ 

+  d4  =  B  ■  f  (2.1) 

with  M  =  E^M*E  =  diag  [1] 

D  =  E^D*E  =  diag  [2  E-  lo^] 

S  =  E^S*E  =  diag  [<o^] 

B  =  e’^B*  (2.2) 

and  =  [qj,  ...  q^^]. 

Thereby  M*,  D*  and  S*  are  the  mass,  damping  and  stiffness  matrices  of  the  structure  and 
B*  is  the  input  force  distribution  matrix  for  the  input  force  J[.  These  matrices  are  nor¬ 
malized  with  the  eigenvector  matrix  E  from  the  finite  element  analysis  which  also 
yields  the  eigenf requencies  o). .  The  structural  damping  £■  is  assumed  to  be  0.005  (O.Si) 
for  i  =  1  ...  1 2.  ^  ^ 

Using  only  velocity  measurements  v  in  the  bipod  legs,  the  measurement  equation  is  deter¬ 
mined  as 

V  =  C  •  a  (2.5) 

with 

C  =  C*  •  E. 

Thereby  C*  is  the  matrix  containing  the  direction  cosines  of  the  bipod  legs. 

With  the  above  nomenclature,  the  motion  x(t)  of  the  vertices  1-4  of  the  tetrahedral  truss 
structure  is  given  as 

The  data  of  the  finiLC  element  analysis  were  delivered  by  K.R.  Strunce  from  the 
Charles  Stark  Draper  Laboratory,  Cambridge,  Mass.,  USA. 
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x(t)  =  E  •  a(t) 

with  X  containing  the  ordered  x,y  and  z  components  of  the  vertices. 


2 . 2  Controller  Design  based  on  Dissipation  Energy  Maximization 
Pei-ign  Rcqu-iAeimnti 

According  to  [3]  the  motion  of  the  flexible  truss  structure  specified  by  equations  (2.1), 
(2.3)  and  (2.4)  has  to  be  controlled  such  that  the  following  design  requirements  are 
met : 


1)  The  physical  model  to  be  used  in  the  controller  design  process  consists  of  the  first 
eight  modes  of  the  model.  The  modes  9  to  1 2  are  to  be  treated  as  unmodelled  modes, 
such  that  they  cannot  be  used  in  any  controller  design  process.  However,  they  are  to 
be  used  in  the  full-order  evaluation  model. 

2)  A  minimum  of  10  percent  modal  damping  has  to  be  assigned  to  the  modes  1,2,4  and  5  and 

a  minimum  of  0,5  percent  to  the  remaining  modes  of  the  12  mode  model.  If  that  is 

achieved,  the  closed-loop  response  of  the  structure  to  certain  initial  conditions  is 
such  that  the  x  and  y  components  of  the  top  vertex  have  magnitudes  less  than  0.0004  and 
0.00025  units  of  length,  respectively,  after  20  seconds. 

For  fulfilling  these  design  requirements  the  controller  can  employ  all  6  actuators/ 

sensors  in  the  bipod  legs  or  any  reduced  number  of  combinations  of  these  actuators/ 

sensors . 


The  primary  objective  of  this  model  is  to  provide  a  well-defined,  non-trivial  dyna¬ 
mical  plant  which  serves  as  a  common  "test-bed"  to  illustrate,  compare,  and  evaluate 
various  controller  design. 


ContKotlzK  StKac.tu.fiz 

A  suitable  low  authority  controller  structure  for  vibration  damping  of  the  flexible  truss 
structure  is  constant  feedback  of  the  velocities,  measured  in  the  bipod  legs: 

f  =  -  K  •  V  .  (2.5) 


V*  > 


Using  these  velocity  measurements  together  with  force  actuators  the  closed  loop  dynamic 
equation  of  the  structure  is  achieved  by  combining  equation  (2.1),  (2.3)  and  (2.5): 

M£  +  [D  +  BKC]  a  +  Sg,  =  0  .  (2.6) 

For  collocation  (collocated  actuators  and  sensors),  the  following  equation  is  valid 


. 


If  in  addition  K  is  symmetric  and  positive  definite,  closed  loop  stability  can  be  guar- 
anted  even  for  the  unmodelled  modes,  as  e.g.  modes  9-12  of  the  truss  structure.  But  ful¬ 
fillment  of  the  damping  requirements  is  not  included.  Therefore  a  general  feedback 
matrix  K  is  chosen  for  the  design  process. 

For  the  determination  of  this  feedback  matrix  K  fulfilling  all  design  requirements,  the 
following  numerical  optimization  is  performed: 


.'.V- .  V' 

>  V.'-' 


Piiiifjation  BnzKgy  Max^rntzatton 

The  sum  of  kinetic  and  potential  energy  in  a  mechanical  system  at  an  initial  time  t^  is 
given  as 


-.  -.  s  -c  •, 
.  ■ 


W  =  T  +  V 
o 


I  'Tk,*  ^  1  Tc 

7  a  Ma  7  3  sq 


Sv.-: 


Differentiating  with  respect  to  time  yields  the  energy  rate 


"  1  a^Ma  +  \  q^'Mg  ♦  \  \  g'sg  =  -^^Dg 

extracted  from  the  system  by  damping  agencies. 


'  •  •  •  •  • 
•  A's'l 


In  reference  [3)  in  addition  to  a  nominal  model  of  the  truss  structure  a  modified 
model  is  specified.  The  controller  has  to  fulfill  the  design  requirements  for  lioth 
models . 
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Reintegration  leads  to 

Wo  =  Wp  =  -  J  a'^D  4  dt  (2.9) 

^o 

which  is  called  dissipation  energy  of  the  system  [5].  As  D  is  the  matrix  of  modal  damp¬ 
ing,  Wp  represents  the  energy  dissipated  by  internal  velocity  proportional  friction. 

Because  of  the  absence  of  other  dissipation  factors,  Wp  is  equal  to  the  total  initial 
energy  W  . 


Now  introducing  output  feedback  according  to  equation  (2.5)  adds  a  new  velocity  propor¬ 
tional  terra  BKC  to  equation  2.6.  This  additional  term  splits  into  a  symmetric  dissipative 
part 


=  1  [BKC  +  (BKC)^] 

and  a  skew  symmetric  matrix  of  conservative  forces 


(2.10) 


^  [BKC  -  (BKC)^] 


(2.1.1) 


The  matrix  represents  the  damping  induced  by  the  velocity  feedback  and  describes 
the  gyroscopic  effects  of  the  feedback. 

Analogue  to  equation  (2.9),  the  integral 


Wc  =  -  I  a  dt 


(2.12) 


represents  the  energy  which  is  dissipated  by  control  action.  The  initial  energy  W  of 
the  system  now  partially  is  dissipated  by  friction  and  control 


Wp  *  W^ 


(2.13) 


The  gyroscopic  matrix  thereby  takes  care  of  the  "internal"  energy  transfer  between 
different  modes  of  the  system,  without  changing  the  total  energy  of  the  system. 

This  dissipation  energy  W  is  used  as  the  global  optimization  criterion,  to  determine 
the  feedback  matrix  K. 


Max  W  (K)  »  K* 


Additionally  the  damping  requirements 

E,  ,  £2’  ^4’ 

are  formulated  as  constraints  of  the  numerical  optimization. 


(2.14) 


(2.15) 


Thus  the  determination  of  the  low  authority  controller  is  performed  via  numerical 
optimization,  implementing  the  design  requirements  as  constraints.  This  constraints  may, 
besides  damping,  contain  additional  design  requirements  as  shown  in  [12]. 

For  this  nonlinearly  constrained  optimization  problem  the  recursive  quadratic  programming 
method  of  Han  and  Powell  [6-9]  explained  in  appendix  A,  is  used  efficiently.  The  numeri¬ 
cal  determination  of  the  dissipation  energy  is  shown  in  appendix  B. 

2.3.  Design  Results 

The  maximization  of  the  dissipation  energy  is  performed  for  the  system  with  8  modes,  as 
specified  in  the  design  requirements.  For  programming  reasons  additionally  to  the  con¬ 
straints  of  equation  (2.15)  £,  >  101  was  formulated.  As  initial  state  for  optimization 

•  *  '  •  • 

was  chosen  qj(o),  q2(o)  “  2.0;  q^(o),  q^lo)  »  0.2  and  zero  elsewhere.  Thus,  large  damping 

of  modes  1,  2,  4  and  5  was  expected. 

The  uncontrolled  behaviour  in  the  x,  y  plane  of  the  line  of  sight  (top  vertex)  after 
a  typical  disturbance  is  shown  in  Fig.  2.2.: 
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Figure  2.2  Motion  of  the  line  of  sight  without 
low  authority  control  for  30s 


S-Lx  ac.tu.a.to^i  and  iznio/ii 

The  optimization  using  all  six  actuators  and  sensors  yields  the  following  feedback  gain. 
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This  gain  is  the  first  during  the  path  of  optimization  which  fulfills  the  design  require¬ 
ments  With  continuing  optimization,  dissipation  energy  is  increased  using  larger  gains 
As  maximization  of  the  dissipation  energy  is  only  a  secondary  means  for  changing  the  gains 
such  that  the  design  requirements  are  met,  optimization  is  stopped,  as  soon  as  this  is 
achieved. 

Fig.  2.3  shows  the  line  of  sight  motion  using  this  feedback  gain. 


Figure  2.3  Motion  of  the  line  of  sight  using  b  actuators  and  sensor 
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This  gain  fulfills  also  the  design  requirements  for  a  modified  truss  structure  [12]. 


The  next  figures  show  the  eigenvalue  plots  for  the  design  model  (Tig.  2.5)  and  the  com¬ 
plete  evaluation  model  (Tig.  2.4)  with  all  12  modes. 
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Figure  2.4  Eigenvalues  of  the  evaluation  model 
(□  open  loop;  x  closed  loop) 
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Figure  2.5  Eigenvalues  of  the  design  model 
(a  open  loop;  x  closed  loop) 

Fou-t  actacLton-i  and  izmozii 

Without  using  the  sensors  and  actuators  in  the  bipod  legs  of  vertex  2  the  design  require¬ 
ments  could  not  be  fulfilled.  This  is  due  to  the  fact,  that  modes  9  to  1 2  should  not  be 
considered  in  the  design  procedure.  After  50  iterations  the  design  conditions  where  al¬ 
most  met  using  very  large  feedback  gains.  However,  this  finally  led  to  a  decrease  of  the 
achieved  damping  for  the  complete  evaluation  model  (spillover  effect)  .  Thus  an  interme¬ 
diate  solution  was  chosen  which  did  not  display  large  spillover  effects. 

Figures  (2.6)  to  (2.8)  present  the  achieved  time  behaviour  and  eigenvalue  locations  for 
the  feedback  gain 
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Figure  2.6  Eigenvalues  of  the  evaluation  model 
(o  open  loop;  x  closed  loop) 


Figure  2.8  Motion  of  the  line  of  sight  using 
4  actuators  and  sensors 


3 .  Minimization  of  the  Control  Energy 

Low  authority  controller  design  via  minimization  of  the  control  energy  is  shown  for  the 
"Purdue  Model",  explained  in  the  following: 


3  .  I  "I’urdue  Model" 

The  model  is  a  large  two  dimensional  space  vehicle  which  can  be  considered  as  a  model 
of  a  solar  power  station.  It  is  similar  to  a  5  km  x  12.5  km  plate  with  a  central  rigid 
body  . 
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Figure  3.1  A  large  two-dimensional  space  vehicle 

This  plate  was  developed  by  Hablani  [4]  as  a  generic  model  of  a  large  flexible  space 
structure  for  control  concept  evaluation.  At  the  four  corners  of  the  plate  and  in  the 
center,  x  and  y  torquers  are  implemented.  Collocated  with  these  torquers  are  slope 
and  rate  sensors  of  the  deflection.  The  structure  of  the  model  equations  is  identical 
to  equations  (2.1)  and  (2.3).  The  data  of  the  relevant  matrices  are  given  in  [4]. 
fontrary  to  the  Draper  Model  this  one  uses  torquers  T  and  angular  velocity  measurements 
8; 

+  D£  +  S£  =  B  •  T 


The  evaluation  model  contains  eleven  modes.  The  modal  pattern  of  the  extended  model  is 
displayed  in  appendix  D.  Structural  damping  of  the  open  loop  system  is  fixed  to  be  0.51 
for  all  modes. 

3.2  Controller  Design  based  on  Control  Energy  Minimization 


Vziign  Re.quifLe.me.nti 


For  the  design  of  an  attitude  control  system  (high  authority  control)  modal  damping  of 
the  plate  has  to  be  augmented  using  low  authority  control. 

Based  on  a  low  order  design  model  the  modal  damping  of  the  structure  shall  be  increased 
from  O.Si  to  SS  using  constant  output  feedback. 

Model  Reduction  and  ContaollefL  Stfiuctufie 

For  development  of  the  reduced  order  design  model  the  model  reduction  technique  of  Litz 
[14]  was  applied.  A  reduced  order  model  containing  the  flexible  modes  .\'o .  5,  7,  8  and 
II,  according  to  appendix  D,  was  considered  adequate  for  controller  design.  The  designed 
controllers  shall  be  evaluated  using  the  evaluation  model  with  eleven  modes. 

As  above,  constant  output  feedback  is  chosen  as  controller  structure 

T  =  -K'e,  1-3.2) 

thus  leading  to  the  same  closed  loop  equation  as  in  section  2 

M£  +  [D  +  BKC]  £  ■*■  Sq  =  0  .  I  3.3) 

Contfiol  Bneagy  Minim<.zat(On 

The  experience  gained  with  the  dissipation  energy  maximization  showed,  that  the  large 
feedback  gains  may  deteriorate  the  system  behaviour  because  of  spillover  effects,  u.  ;•  i 
is  the  objective  to  fulfil  the  design  requirements  with  small  feedback  gains.  As  a 
means  to  achieve  this  objective,  minimization  of  the  control  energy  is  chosen  as  perfor¬ 
mance  criterion: 

CO 

Min  J  T‘^(t)  •  T(t)  dt  -  K*  (3.4) 

K  t 

0 


•  i 


-I 


1  <)->) 


Additionally  the  damping  requirements  are  formulated  as  constraints 


2  Si  for  i  =  1 ,  . . .  n 


(3.5) 


In  the  former  case  of  dissipation  energy  maximization  the  optimization  criterion  was 
used  as  a  means  to  change  the  gains  such  that  the  constraints  are  met.  Augmenting  the 
gains  improved  energy  dissipation  and  required  damping.  The  gradients  of  the  criterion 
:uid  of theconstraints  in  general  had  the  same  sign.  In  the  case  of  control  energy  minimi¬ 
zation  the  gradients  of  the  criterion  and  of  the  constraints  have  in  general  opposite  signs. 
Thus  augmenting  the  gains  d..  ariorates  the  energy  minimization  but  improves  damping. 

for  performance  of  the  optimization  a  modified  version  of  the  Han/Powell  algorithm 
[6-9]  using  least  squares  approximation  for  the  one-dimensional  minimum  search  from 
Schittkowsky/Kraf t  [15]  was  used. 

The  control  energy  as  function  to  be  minimized  is  determined  using  the  Liapunov  equation 
in  appendix  B,  but  changing  the  matrix  -*■  (KC)‘.  KC  in  the  weighting  matrix  Q. 

3.3.  Design  Results 

For  control  energy  minimization  on  initial  state  vector  resulting  from  positive  respec¬ 
tively  negative  torque  impulses  was  chosen.  Four  different  feedback  strategies  are 
investigated  as  shown  in  the  following.  Thereby  only  the  torquers  T  ,  T  ,  T  ,  T  , 
and  T  ,  T  are  used.  ^1  ^1  ^3  ^3 

■^4  >'4 

Local  Feedback 

The  angular  velocities  measured  in  the  lower  left  corner  of  the  plate,  i.e.  0  and  0  , 

X]  y^ 

are  fed  back  to  the  torquers  T  and  T  only.  The  same  was  done  for  the  central  angular 

1 

velocities  0  and  Q  .  They  are  fed  back  to  the  torquers  T  and  T  only.  For  the  upper 
*3  >^3  ^3  ^3 

right  corner  it  is  vice  versa.  In  this  scheme  the  torquers  use  only  information  measured 
at  the  same  location  (local  feedback!). 

Optimization  yield  the  following  feedback  gain: 
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(3.6) 


Figures  (3.3)  and  (3.3)  show,  that  the  design  requirements  are  met  for  the  design 
and  also  for  the  evaluation  model. 


Figure  3.3  tigenvalues  of  the  evaluation  model  (a  open  loop;  x  closed  loop) 


^  These  results  were  derived  in  the  frame  of  the  LSA-Study  on  "Investigation  of  the 
Attitude  Control  of  Large  Flexible  Spacecraft"  under  ESTtC  Contract  No . 5310/83/NL/BI , 
performed  by  DFVLR  and  Dornier-System . 
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Figure  3.3  Eigenvalues  of  the  design  model 
(a  open  loop;  x  closed  loop) 


KxlcLt  Feedback 


For  this  strategy  the  feedback  gain  matrix  was  restricted  to  be  diagonal  thus  enforcing 
the  following  feedback  scheme;  Q  ^T,0  ■»T;6  ... 

Xj  x^  Xj  Xj  X3 

No  stable  solution  was  found  for  this  feedback  strategy.  This  is  explained  by  the  fact, 
that  the  dominating  modes  of  the  plates  are  the  antimetric  modes  No.  5  and  7  (  see 
appendix  D) . 

Cfi.oii-Ax.-iai  Feedback 

For  this  strategy  the  following  feedback  scheme  is  used:  0  •  T ,  ,  0„  •*  T  , 

Xi  y^  y,  x^ 

0  ^  T„  ,  . . .  .  Thus  the  measured  angular  velocities  of  the  x-axes  are  locally  fed  back 

*3  ^3 

to  the  y-axes  torquers  and  vice  versa. 

The  following  feedback  matrix  resulted: 

r  0  -1.47  I  1 
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The  achieved  eigenvalue  distribution  (see  Fig.  3.4,  3.5)  is  excellent.  This  confirms 
that  the  dominant  modes  of  the  structure  are  the  antimetric  modes  No.  5  and  7.  A  cross 
axial  feedback  scheme  using  only  six  feedback  gains  is  sufficient  to  provide  the 
required  modal  damping  of  51. 
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Figure  5.5  Eigenvalues  of  the  evaluation  model 
(□  open  loop,  X  closed  loop) 
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Compl^t^  fizdback 

Using  the  feedback  gain  matrix  from  local  feedback  as  starting  value  the  optimization 
routine  yield  the  following  feedback  gain  for  the  complete  feedback  case: 
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The  eigenvalue  locations  figs.  (3.b)  and  (5.7)  differ  only  slightly  from  those  of 
local  feedback,  because  the  gains  are  not  much  different  either. 
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Eigenvalues  of  the  design  model 
(□  open  loop,  X  closed  loop.l 


Eigenvalues  of  the  evaluation  model 
(a  open  loop,  x  closed  loop) 


4  .  Critical  Aasessiiient  of  the  Ue.sijin  Me t ho J s 

In  the  two  proceeding  chapters  low  authority  controllers  io!  ilcAiile  spa^cLia:!  ue:e 
designed  using  numerical  op  t  iiiu  ca  t  ion  methods.  1  lie  given  design  requ  i  i  e::;eii  t  s  v.eit 
fulfilled  using  different  opt  iiiu  cat  ion  criteria:  first  dissipation  eiiergv  uas  sa.v;  i  evl 
and  second  control  energy  was  ininimiced.  In  both  cases  damping  requi  i  oiient  ■■  v.eii  i 
lated  as  constraints. 

.-\s  a  result  of  dissipation  energy  raa.ximication  it  could  be  shown,  li.at  il-.is  ciiterion 
finally  led  to  large  feedback  gains.  Thus  the  probability  of  unwanted  spillo'.ir  elfects 
or  even  spillover  instability  increased. 

However,  minimi c ing  the  coitrol  energy,  keeps  feedback  gams  small.  Ihus  the  profabilit) 
of  spillover  effects  is  reduced  considerably,  although  its  occurrence  cannot  be  aioijej 
compietely . 

Due  to  the  highly  efficient  optimization  routines  used,  the  cominitation  effort  remains 
reasonable.  Computation  time  for  one  optimization  for  a  s>stem  with  e.g.  4  modes,  4 
inequality  constraints  and  lb  gain  elements  to  be  optimized  is  about  15  sec  Cl’U-timc  on 
an  IBM  main  frame  system.  Thereby  about  18  iteration  steps  witli  500  function  calls  are 
performed.  The  computation  time  is  used  mainly  for  determination  of  the  functional  value 
This  is  done  for  the  above  example  by  solving  an  8-th  crder  Liapunov  equation  (sec  appen 
dix  Bj  . 


Lven  for  the  Draper  model  with  S  modes,  ‘10  inequality  constraints  and  5b  gain  elements 
to  be  optimized,  a  solution  was  found  after  about  1 20  sec  Cl’U-time. 

The  advantage  of  low  authority  controller  design  by  numerical  optimization  is  its  great 
variability  for  system  design.  Design  requirements  may  not  only  be  the  damping  require¬ 
ments  as  above,  but  also  robustness  properties  may  be  implemented  [12]  or  actuators 
and  sensors  may  be  positioned  on  the  flexible  structure  [2,5]  or  other  design  require¬ 
ments  may  be  postulated. 


5 .  Conclusions 

Due  to  the  now  existing  high  efficient  software  for  nonlinear  optimization  with  non¬ 
linear  constraints,  optimization  methods  can  be  used  adi'antagcously  in  system  design. 
This  is  shown  for  the  design  of  low  authority  controllers  for  large  flexible  structures. 
Two  different  optimization  criteria  were  implemented  and  the  design  requirements  were 
formulated  as  constraints  of  the  optimization.  The  main  advantage  of  controller  design 
using  numerical  optimization  methods  is  the  possibility  of  implementing  arbitrary  design 
requirements .  Thus  the  use  cf  optimization  methods  becomes  a  variable  tool  for  sy.stein 
design  even  for  high  order  systems. 
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Appendix  A 

Numerical  Optimization 


The  optimization  problem  of  equation  (2.14)  and  (2.15)  represents  a  nonlinear  optimi¬ 
zation  with  constraints.  The  constraints  are  inequality  constraints  im  Han  and 

Powell  propose  the  following  globally  convergent  extension  of  the  damped  Newton  method 


for  this  problem  [6-9].  Generate  a  sequence  converging  to  a  local  solution  y*  by 

means  of  recursively  solving  the  following  quadratic  programming  problem 


min  [  VFiyj^d  +  i  d^H  d  ) 
d 


s  .  t .  < 


vc.(y)‘d  +  c.(y)  =  0,  V  i  e  Jg 


Vc^(y)‘d  >  c.(y)  >  U,  V  i  e  .r. 


which  yields  the  search  direction  d  in  which  the  next  approximation  to  the  solution  is 
found ; 


k+l 


k  I  k 

I  ^ 


The  relaxation  factor  e  lO.I  ]  ensures  global  convergence;  it  results  1  roi;i  a  step 


length  algorithm  by  properly  reducing  the  test  function 


R(Z.O) 
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with  suitable  chosen  parameters  p.  II  is  an  approximation  to  the  lie  -ian  ci  t!ic 
Langrangian 


with  i-  being  the  lunctionai  to  be  minimited.  ilie  algorithm  I'olongs  to  t)ic  class  of 
''variable  metric  metiioJs  for  constrained  op  t  imi  ;a  t  ion”  and  converges  supe  r  1  i  nea  r  1  y  ["I 


Appendix  B 

Dissipation  Hnergy  Determination 

Transforming  equation  '2.1)  to  state  space  form  yields 
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or  in  short  form 

2  =  A’  7.  +  B’  r  ; 


C  2 


For  the  proposed  output  vector  feedback,  see  equation  (2.S),  the  closed  loop  stability 
matrix  is  given  as 

"o  I  1 


S  =  A'  +  B'  K  C 
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-M''s  I  -M''(D  a-  BKC) 


Using  the  definition 
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the  controller  induced  dissipation  energy  (equation  (2.]2))  can  be  written  as 
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Applying  standard  state  transformation  techniques  equation  |*J  yields 
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The  solution  of  the  integral  expression  defined  as 


7  ^  ■  t  .V  ?:  •  t 

J  e  no  dt 


is  equivalent  to  the  solution  of  the  following  Liapunov  equation 

ih'  ^  pX  =  (J 

Thus  the  controller  induced  dissipation  energy  is  determined  as 
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The  deterriination  of  the  dissipation  energy  of  a  flexible  structure  with  n  modes 

requires  the  solution  of  Liapunov  equation  (*♦)  for  2n  x  2n  matrices.  The  solution  of 
equation  (*♦)  exists  and  is  unique  as  long  as  the  eigenvalues  of  'X  have  negative  real 
parts  [10].  The  numerical  solution  of  the  Liapunov  equation  is  done  efficiently  using 
the  algorithm  of  Bartels  and  Stewart,  as  symmetry^of  ^  is  guaranteed  [II].  During  the 
optimization,  its  path  is  restricted  to  matrices  A  having  eigenvalues  with  negative 
real  parts. 


Appendix  C 

Mode  Shapes  of  the  Draper  Model  (taken  from  the  original  report  [5]) 
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Appendix  D 

Nodal  Pattern  of  the  Purdue  Model  (taken  from  [15]) 
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Via  Eiidossiana,  16-001 84  ROME  (Italy) 


:(i.i 


^A  new  strategy  in  controlling  the  modal  shapes  of  large  structure  in  space-  is 
presented  in  this  study.  An  active  low  authority  modal  control  system,  consisting  of  a 
discrete  number  of  servo  system  units  (M.C.U.)  distributed  along  flexil)le  masts  suppor¬ 
ting  RF  radiators,  is  provided  to  measure  and  control  the  local  structural  deformations 
in  order  to  obtain  a  modal  shapes  resulting  in  acceptable  pointing  error  for  the  RT  radia 
tors.  Each  servo  unit  is  conceived  as  a  model  following  control  system  implementing  a 
strategy  based  on.f.F.T.  pairs  computations.  The  control  efforts  applied  by  the  M.C.U.s 
to  the  mast  control  points  are  made  prbportional  to  the  spectral  error  function  genera¬ 
ted  by  a  real  time  F.F.T.  dedicated  microprocessor  as  the  difference  between  the  measured 
and  desidered  modal  spectra  relative  to  the  antenna  angular  deflections  in  respect  to  a 
fixed  set  point.  The  decentralized  control  system  organized  by  a  central  controller  res^ 
ding  in  the  master  M.C.U. ,  will  force  the  antenna  to  match  the  model  dynamical  behaviour 
which  is  expected  to  improve  the  antenna  pointing  accuracy  within  the  L.S.S.  design  re¬ 
quirements. 


I  -  Introduction 


A  control  process  correlated  with  the  spectral  requirements  becomes  a  stringent 
necessity  particularly  in  aerospace  applications  where  the  system  dynamic  behaviour  must 
be  essentially  regulated  at  a  particular  frequency  range  established  by  the  designer.  The 
need  of  a  control  strategy  based  on  the  frequency  domain  data  information  is  felt  parti¬ 
cularly  in  the  research  field  treating  the  structural  modal  control  based  on  the  natural 
frequencies  identification  processes.  A  control  strategy  based  on  spectral  data  computed 
by  a  real  time  high  speed  F, F.T, .dedicated  microprocessor  has  been  presented  in  Ref.l, 
treating  the  analysis  and  synthesis  of  a  digital  feedback  control  system  applying  the  new 
concepts  of  the  frequency  domain  model  following  strategy;  in  the  proposed  model  follo¬ 
wing  configuration  the  feedback  error  in  the  correspondent  analog  counterpart  is  replaced 
by  the  error  function  obtained  as  the  inverse  F.F.T.  transform  of  the  spectral  difference 
between  the  system  and  model  response,  the  last  one  stored  in  a  programmable  microproces¬ 
sor  memory  area.  The  spectra  comparison  is  performed  in  the  same  time  slot  in  which  the 
system  response  spectral  lines  are  computed  from  the  same  number  of  time  observations. 

The  total  time  required  to  carry  out  the  F.F.T.  and  sucessive  I. F.F.T.  computations,  the 
last  one  employing,  with  only  minor  changes,  the  same  algorithm  used  for  the  F.F.T.,  has 
to  be  less  then  the  controlled  system  settling  time  in  order  to  obtain  a  regulation  pro¬ 
cess  compatible  with  the  time  domain  system  performances;  such  a  restriction  imposes  a  li¬ 
mit  on  the  processor  computing  speed.  The  feasibility  of  such  control  system  comes  out 
from  the  enormous  progress  in  microprocessor  technology  allowing  a  drastic  reductior  in 
the  time  required  to  perform  l/O  and  basic  arithmetic  operations  involved  in  the  F.F.T. 
algorithm  computations.  In  consideration  of  the  processor  tecnology  state  of  art,  the  pro¬ 
cessor  computing  speed  doesn't  constitute  a  problem  for  the  class  of  space  application 
treated. 


The  model,  defined  in  the  frequency  domain,  is  programmed  to  < omply  with  the 
frequency  constraints  predicted  for  the  systt^m.  The  feedback  process  developed  in  the  ser¬ 
vo  loop  will  force  the  system  to  respond  as  the  model,  "reflecting",  to  an  approximation 
depending  on  the  designer  ingenuity,  the  frequency  characteristics  imposed  on  the  model. 
The  main  factors  affecting  the  degree  of  system  convergence  toward  the  mode;!  are  th<!  spec¬ 
tral  line  selectivity,  which  depends  on  the  process  sampling  rate,  the  F.F.T.  algorithm 
numerical  properties  and  associated  software  (employed  to  implement  it  .  In  order  to  impro¬ 
ve  the  convergence,  the  error  spectral  function  can  he,  before  going  itito  the  7. F.F.T. 
process,  modified  by  means  of  digital  filtering;  in  principli-  using  a[)[)ropiate  F.l.R.  or 
I.R.R.  algorithms,  each  spectrum  line  may  be  corrected  in  tl>e  range  of  ttie  t  requenc  i <'s 
considered  in  the  F.F.T.  computation. 

The  system  time  response  is  generally  expected  to  differ  somehow  lioni  (he  time 
response  correspondent  to  the  model  spectrum;  this  effe<  t, ,  due  t  o  some  degree  ot  i  lu  onipa- 
tibility  of  system  and  model  spectral  contents,  may  1,,.  adapted  to  t  fie  design  r  cqii  i  i-emcnt  s 
reaching  a  reasonable  compromise  between  the  time  and  frequency  domain  spi-c i f  i c at  ions  by 


choosing  a  proper  digital  filtering  algoritlim 


The  main  advantages  arising  from  the  control  strategy  based  on  the  F.F.T.data 
informations  can  be  summarized  as  follows: 

-  the  system  frequency  spectrum  can  be  observed  in  a  single  or  repetitive  time  inte  vals, 
the  lenght  of  which  can  be  chosen  on  the  basis  of  the  system  bandwidth  and  F.F.T,  fre¬ 
quency  selectivity 

-  a  number  of  model  spectra  can  be  programmed  and  stored  in  the  microprocessor  memories 
to  obtain  a  set  of  frequency  constraints  to  be  reflected  on  system  time  response 

-  the  control  system  is  structurally  suited  to  implement  a  digital  filtering  process, as 
may  be  requested  to  solve  advanced  control  algorithms 

-  a  new  potential  authorithy  in  noise  rejection  can  be  achieved  as  result  of  an  high  '•e- 
solution  obtainable  in  single  spectral  line  measurement 

-  the  spectral  power  density  informations,  computed  on  the  available  F.F.T,  data,  can  be 
directly  used  to  implement  a  control  strategy  tending  to  regulate  the  system  inherent 
spectral  energy, 

A  servo  unit,  as  it  has  been  considered  in  Ref.l,  has  been  employed  as  a  Modal 
Control  Unit  (M.C.U.)  in  a  decentralized  active  modal  control  of  a  flexible  masts  suppor¬ 
ting  large  communication  antennas  in  a  L.S.S,  platform  sketched  in  Fig,  1, 

The  main  objective  proposed  in  the  present  work  is  to  control  the  antenna  angu¬ 
lar  displacements  in  order  to  improve  its  1,0. S.  pointing  accuracy. 

The  description  of  the  structural  model  assumed  for  the  L.S.S, platform  and  its 
modal  characteristics  are  given  respectively  in  Sect.  2  and  Sect,3«  The  concepts  of  the 
proposed  modal  control  strategy  with  its  physical  and  analytical  aspects  are  discussed 
in  Sect. 4.  In  Section  5  some  details  of  system  design  and  implementation  are  treated.  Si¬ 
mulation  results  are  presented  in  the  last  section. 

2  -  Platform  structural  model 

The  structural  configuration  assumed  for  the  L.S.S,  platform  is  depicted  in 
Fig. 2,  It  consists  of  a  symmetrical  structure  with  a  large  hub  and  platform  arms  suppor¬ 
ting  the  solar  panels  and  payloads.  A  45  meters  diameter  communication  antennas  are  atta¬ 
ched  to  the  mast  by  rigid  mounting  pads.  The  tip  to  tip  dimension  of  the  supporting  masts 
is  fixed  at  33«7S  m,;  the  antenna  mass,  which  includes  the  mounting  pad,  feed  unit  and 
electrical  connections,  amounts  to  434.209  Kg,  The  mast  structure  consists  of  beam  like 
lattices  having  triangular  cross  sections  providing  a  minimum  number  of  longitudinal  mem¬ 
bers;  five  identical  bay  elements  with  7.5  i"*  length  longitudinal  bars,  5  "'b ,  long  battens 
and  reinforcing  diagonal  stringers,  are  the  constituent  parts  of  the  platform  arms  sup¬ 
porting  the  antennas.  Considering  a  mass  density  of  2768  Kg/m^,  the  mass  of  the  single 
bay  is  estimated  at  the  value  of  13.469  Kg.  The  stiffness  product  (E.l)  taken  into  consi¬ 
deration  is  1,57  10^  N.m^. 

In  the  present  study  only  the  platform  arms  are  considered  flexible  while  nil 
the  other  platform  structural  components,  including  the  antenna  dish  and  feed,  are  assu¬ 
med  rigid.  Since  the  investigation  afforded  is  essentially  directed  to  solve  a  dynamical 
control  problem,  only  a  relatively  small  number  of  degrees  of  freedom,  correspondent  to 
the  lowest  natural  frequencies,  will  be  sufficient,  with  good  engineering  accuracy,  to 
analyze  the  dynamical  behaviour  of  the  antennas  involved  in  the  flexibility  effects  of 
the  supporting  masts.  For  that  reason  a  lumped  mass  structural  model,  where  the  mass  of 
each  platform  arm  is  reduced  to  a  discrete  number  of  rigid  masses  connected  by  weightless 
connectors  having  the  same  elastic  properties  as  the  physical  structure,  has  been  consi¬ 
dered  for  the  modal  analysis.  In  conformity  with  the  assumed  structural  configuration, 
each  platform  arms  is  reduced  to  to  five  discrete  masses,  each  concentrated  ad  the  cen¬ 
ter  of  mass  of  the  bay  elements.  Since  the  system  is  symmetrical  in  respect  to  the  cen¬ 
tral  hub,  only  half  of  it  needs  to  be  considered  for  the  analysis. 

To  solve  the  structural  dynamic  problem,  the  common  modal  analysis  approach  has 
been  employed.  The  natural  frequencies  for  the  5  D.O.F,  undaped  structural  model  subjected 
only  to  the  bending  elastic  deformation,  spans  from  the  value  of  0,18945  Hz.  (first  ben¬ 
ding  mode  natural  frequency)  to  23,293  Hz,  (5-th  bending  mode  natural  frequency);  The 
first  lowest  frequencies  are  dominant  in  beam  clastic  behaviour, 

3  -  The  frequency  domain  model  following  concepts 

In  order  to  illustrate  the  strategy  involved  in  the  modal  control  process  inves¬ 
tigated  in  this  study,  consider  the  second  order  differential  matrix  equation  dest ribing 
the  coupled  forced  dynamics  of  the  assumed  lumped  masses  model: 

[m]  3(t)  +  [k]  a  (t)  =  £  (t)  (  1) 


where  ^  ar(‘  rt‘.sp<‘ct  i  vt*  ly  t  lu*  sj-nuiiet  i*  i  ca  I  mass  .iii<!  sliriin->.s  mat  tit  <■ 

vector  of  ^he  generali/ecl  coorclituites  aiitl  I-  is  a  vei  l  or  ol‘  tht‘  i  xternal  lOi 
to  the  grid  points*  For  the  sakt'  of  seinpiit  ity,  the  g<‘iiera  1  i  ./eti  coordinates  ar 
to  the  angular  deflection  of  the  idt‘aii/i'd  bt‘am  sections  by  defining  the  statt* 
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vector  X 


(t)  the  element  of  which  are,  for  each  cUgrc^e  od 
and  their  first  derivatives*  The'  etjuation  (l)  is 
differential  equations: 

x(t)=Ax(t)+Ui-(t) 


fre<‘dom,  I  he  angular 
tht‘n  t rails formt'd  in  . 


]>eam  cJefleetions 
I  set  of  first  ordc*r 
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where  A  and  B  are  respectively  the  state  and  control  matrices  with  elements  (expressed  in 
terms  of  masses  and  stiffness  coefficients*  The  dynamical  beliaviour  oi'  an  established  bc,*cim 
reference  section  is  obtained  integrating,  with  congruent  initial  conditions,  the  state 
equation  (2)  and  selecting,  as  output  variable,  the  angular  displacement  observed  at  the 
reference  section  by  means  of  the  scalar  output  eejuation: 

«r  (t)  =  C  X  (t) 

This  time  function  is  measured,  at  discrete  time  intervals,  by  an  angular  displacement 
sensor  installed  at  the  reference  section;  the  output  of  this  sensor  is  Fourier  transfor¬ 
med  and  the  resultii  g  normalized  discrete  frequency  spectrum  (D.F.T.)  is  expressed  by: 
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k  =  0,  1,2, 
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where  N  is  the  number  of  the  angular  displacement  (  a^)  samples,  assumed  equal  to  the  cor 
respondent  number  of  the  computed  frequency  samples.  This  spectrum  is  observed  in  a  speci¬ 
fied  time  slot,  established  in  function  of  the  system  bandwidth. 

Consider  a  time  response  model  a  (t)  for  the  reference  section  angular  displa 
cements  which  can  be  generated  by  solving,  in  a  digital  filter,  the  following  N-order  di£ 
ference  equation: 
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relating  the  ciurent  output  samples  to  the  past  output  samples,  stored  in  computer  memo¬ 
ries,  and  the  present  and  past  input  samples. 

The  discretized  input  forcing  function  r  (n)  is  supposed  to  be  applied  simulta¬ 
neously  to  the  system  (l)  and  model  generator  (4)  inputs. 

The  D.F.T,  spectrum  for  the  response  model  (4)  is  obtained  as: 

N-I 

A  ( k )  =  2ia  ( n ) 
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k  =  O, 1, 2, ..  N-I 

The  spectral  error  function  E  (k)  correspondent  to  the  time  error  function: 

e(t)  =  a  (t)  -  a  (t) 

m  r 


(6) 


will  be  expressed  by: 


(k)  =  A  (k) 
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Forcing  to  a  null  value  the  spectral  error  (7)  in  a  frequency  band  of  interest 
means.  In  principle,  to  impose  to  ttie  controlled  system  (1)  the  frequency  constraints 
estal)lish<-d  for  the  model  spectriun  (S).  This  theoretical  result  can  be  approximated  im¬ 
plementing  a  discrete  feedbadk  process  driving  a  servosystom  in  its  effort  to  match  the 
system  and  mo<le I  spectra.  Since  it  is  desiderable  to  maintain  a  conventional  analog  con¬ 
figuration  for  such  feedback  model  following  structure,  the  S[)ectral  error  fiuiction  (7), 
must  be  transformed  t)ack  in  flu-  time  domain  applying  the  inv<?rse  discrete  Fourier  tras- 
form  (l.D.F.r.)  process  to  the  fuiu-.tiou  F.(k): 
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The  correspondent  continoiis  error  f'lmetion  (o)  i obtained  smoot  li  i  in;  tiie  di  ret  e  1  nn<  t  ion 

(8). 

Since  it  is  advisable  to  perform  the  spectral  computational  pi ot esses  in  an  on¬ 
line  computer  located  in  the  feedback  brancli  of  a  »  onvent '  ona  1  ser  vo  loop.llie  model-t  oi  lo¬ 
wing  configuration  shown  in  Fig, 3  has  been  adopted.  I'he  n  del  error  delined: 

e  ( t  )  =  r  ( t  )  -  n  ( t  )  (  () ) 

m  m 

is  generated  solving  the  first  order  stt'itc*  equation: 

e(t)=A  c(t)  +  Bi*(t)  (lO) 

—m  e  *Tn 

(t>  =  C  «  (t) 

in 

The  feedback  branch  is  carrying  the  following  information: 

f(t)=e(t)-a(t)  (ll) 

m  r 

yielding,  at  the  servo  unit  input,  the  error  function: 

e  (t)  =  r  (t)  -  f(t)  =  a  (t)  -  a  (t)  (12) 

m  r 

ready  defined  in  (6),  Since  all  the  data  flowing  on  the  feedback  branch  are  the  results 
of  the  digital  processing  carried  out  by  a  digital  computer,  the  function  f  (t)  as  a  mat¬ 
ter  of  fact  is  discrete  in  nature  and  comes  out  from  a  D.F.T,  process: 

F(k)  =  E  (k)  +  A  (k)  (  13) 

m  r 

where  A  (k)  was  defined  in  (3)  and  E  (k)  is  the  D.F.T.  of  the  discrete  error  function 
e  (n)  given  in  (9).  The  continuous  function  f  (t)  is  obtained  by  a  smoothing  process  ap¬ 
plied  to  the  result  of  the  discrete  inverse  transformation  (I.D.F.T.)  of  the  computed 
spectrum  F(k): 


f  (n) 


.f  2n  . 

^  _I_  X  F  (k)  e  N  ’ 


n  =  0,  1, 2, ....N-I 

Generally  before  going  into  the  I.D.F.T.  process,  the  feedback  spectrum  F(k)  is  digitally 
processed  in  order  to  impose  on  it  some  frequency  window  functions  or  to  include  correc¬ 
tions  in  the  attempt  to  improve  the  system  and  model  responses  matching.  The  modified  feed¬ 
back  spectrum  will  be  obtained  as  a  result  of  the  digital  process  expressed  in  z-domain: 

F^(z)  =  G  (z)  F  (z)  ( 15) 

where  the  transfer  functio  G  (z)  can  be  generally  expressed  in  M-polynomial  form: 
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-  The  spectral  modal  control 


The  frequency  domain  model  following  control  principles  sketched  in  Fig, 4  are 
applied  to  implement  a  servo-unit  which  is  a  part  of  a  organized  active  modal  control 
system;  it  has  been  conceived  as  a  compact  device  the  constituent  parts  of  which  are  an 
optical  angular  sensor,  a  force  actuator  and,  for  the  master  unit,  a  microprocessor.  As 
indicated  in  Fig,5>  the  servo  unit  is  configured  as  a  feedback  structure  where  the  compu¬ 
ting  unit  with  its  interfaces  and  the  servoactiiator  with  its  power  amplifier  arc  respec¬ 
tively  located  in  the  feedback  and  forward  path.  A  discrete  number  of  such  servo  unit  are 
distributed  along  the  mast  length  constituting  a  decentralized  active  control  system  ge¬ 
nerating  forces  between  parts  of  the  mast  structure.  The  servo  control  efforts  are  regula¬ 
ted  in  order  to  force  the  mast  reference  section,  where  the  antenna  is  attached,  to  repro 
duce  the  model  dynamical  behaviour  as  prfidicted  by  the  designer.  To  make  clear  this  point 
suppose  to  choose  a  model  with  a  stiffness  product  (El)  greater  than  the  value  relative 
to  the  actual  mast  and  to  apply  to  the  last  a  force  distribution  such  that  the  dynamical 
response  of  the  actual  mast  becomes  coincident  with  that  predicted  for  the  model;  since 
the  model  has  a  greater  stiffness  it  is  resonable  to  expect  a  lower  angular  deformation 
of  the  mast  section  assumed  as  reference  for  the  active  mode  control.  Taking  into  consi¬ 
deration  several  practical  limiting  factors  such  thc‘  maximum  efforts  level  available'  for 
the  control  purposes,  the  size  and  the  weight  of  the  actuators  and  the  interacting  struc- 
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tural  coupling  effects  between  the  mast  sections  supporting  tlu>  servo  units,  only  a  par¬ 
tial  matching  must  be  expected.  The  present  work  is  directed  to  investigate  at  this  re¬ 
gard  the  effectiveness  of  the  propost  J  modal  control  system  in  terms  of  reduction  of  the 
reference  mast  section  angular  displacement  and  to  prove  that  it  is  large  enough  tc  im¬ 
prove  significantly  the  antenna  pointing  accuracy.  The  design  objective  afforded  in  the 
following  is  to  provide  a  control  strategy  regulating,  in  resemblance  to  a  specified  dy¬ 
namical  model,  the  angular  deflections  of  the  reference  section.  All  the  servo  units 
which  are  part  of  the  active  control  structure,  and  for  that  reason  referred  as  Modal 
Control  Units  (M.C.U.s)  concur  in  the  generation  of  tJie  force  and  moment  distribution 
along  the  mast,  as  requested  to  provide  the  best  obtainable  system-model  matching. 


Since  it  is  advisable  to  perform  the  required  spectral  computations  involved 
in  the  modal  control  in  proximity  of  the  optical  angular  displacement  sensor,  which  is 
expected  to  be  integrated  with  the  mast  structure  in  the  reference  section  location,  the 
computing  luiit  will  reside  in  the  M.C.U.  linked  to  the  reference  section. 


The  control  efforts  generated  by  the  other  M.C.U.s  are  developed  in  coordina¬ 
tion  to  the  data  flow  originated  in  the  computing  unit;  furthermore,  in  order  to  obtain 
the  desidered  force  distribution  along  the  mast,  different  weighting  gains  must  be  pro¬ 
grammed  and  assigned  to  the  various  M.C.U.s,  For  these  reasons  the  M.C.U.  linked  to  the 
mast  reference  section,  on  the  ground  of  its  memory  and  computing  capability,  will  ope¬ 
rate  as  centralized  controller  making  the  proposed  active  modal  control  (A.M.C.)  system, 
as  depicted  in  Fig.S  a  decentralized  control  organized  by  a  central  controller  residing 
in  a  "Master"  M.C.U. 


Continuing  the  analitic  approach  given  in  the  preceding  section,  the  force  ap¬ 
plied  by  each  M.C.U.  actuator  to  the  correspondent  grid  point  is  made  proportional  to 
the  time  error  function  e(t)  given  in  (12)  and  its  first  derivative.  Considering  zero 
the  external  forcing  function  r(t)  applied  to  the  model-following  control  structure  and 
referring  to  (ll)  and  (12),  it  can  be  proved  that: 


(t)  =  a  (t)  -  a  (t)  =  -  f  (t) 
m  r 


( 17) 


The  force  distribution  along  the  mast  can  be  expressed  as  a  vector: 

K  .  i  (t) 
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where  ^  (t)  is  the  excitation  vector: 

1  (t)  =  [  f  (t) 


i  =  1,2,...  N 
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and  K  is  a  gain  matrix  the  element  of  which  are  the  proportional 

.U.,  a  P.D,  controller. 
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and  derivative 


To  save  computational  time  consuming,  a  Fast  Fourier  Transform  (F.F.T.)  algo¬ 
rithm  has  been  used  in  the  D.F.T.  computation;  since  the  discrete  Fourier  transform  is 
an  exactly  reversibile  process,  the  same  F.F.T.  algorith  has  been  used  for  the  I. D.F.T. 
computation . 


The  F.F.T.  algorithm  has  been  widely  treated  in  the  leterature;  here  few  notes 
are  given  to  introduce  the  F.F.T,  implementation  in  a  real  time  dedicated  microprocessor. 
To  provide  a  good  trade  off  in  computing  speed  and  hardware  complexity,  the  2-radix  deci¬ 
mation  in  time  algorithm  is  taken  into  consideration.  This  algorithm  is  defined  for  N  ti¬ 
me  and  N  frequency  points,  where  N  is  a  power  of  two.  Breaking  systematically  the  N  points 
D.F.T.  into  two  N/2  points  D.F.T.,  the  original  D.F.T.  results  in  a  collection  of  two 
points  D.F.T.  allowing  the  maximum  reduction  in  the  total  number  of  elementary  operations 
involved  in  the  algorithm.  The  frequency  spectrum  of  a  time  fimction  is  computed  by  a  re¬ 
petitive  use  of  a  computational  block  (butterfly)  the  input  of  which  is  arranged  as  a 
sequence  of  time  samples  referred  as  even  and  odd  data  points.  Each  butterfly  solves  an 
algorithm,  given  for  the  k-th  spectrum  line,  by  the  expression: 
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F(k)  =  Fj  (k)  +  W  F^  (k) 


(  20) 


where  the  constituent  spectra  are  defined: 
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where  f(n)  is  the  observed  time  function  and  T  is  the  sampling  time.  Since  the  phase  fac¬ 
tor  W  and  W  are  complex  quantities,  the  frequency  functions  F  (k)  and  F  (k)  are  complex- 
functions,  Referring  specifically  to  the  feedback  spectrum  FTk)  ,  it  can  be  put  in 


the  formi 


<  Zi) 


F(k)  =  F.l  .  r.  ['  (“)]  =  ‘■  ''^F 

where  the  feedback  spectrLun  is  exprc-sst'd  in  terms  of  the  module  (k)  and  (f  (k) 

resulting  from  the  F*F^T,  com[)ut  atlons  *  A  digital  fiit<*i*ing  piax  are  genei<»ll\  appli<(l 

to  the  module  spectrum  (k)  to  correct  it  by  the  phase  effett-^  in  the  rangi  ol  Ir<(|nen- 

cies  which  are  judged  to  be  dominant  in  t  he  partii  iilar-  applit  .d  ion  .d  fiand,  ) m  t  lu  rtnor  e  a 
digital  process  may  b<‘  re(iuired  to  apply  particulai*  fretpienc  y  window-^  to  tin-  (  fimpiit  ed 
spectrum  to  avoid  spectral  error's  across  tin*  band  and  sm<*aring  ai  the  band  edg»s  with  <  .ui 
result  in  poor  fretiutmcy  selectivity;  F*I.R,  filtering  pro<  es->  mav  hi*  also  retjuired  in  or¬ 
der  to  improve,  if  required,  the  system  -  model  matching. 

Traslating  the  coi’rccted  specti'iuii  module  in  the  time  domain  !)>  meaii'-  ol  t  lie 
I.F.F.T.  process,  the  discrt‘te  f<‘cdback  function  f(n)  is  oht  aim'd,  I.miiloving  the  s.une  di¬ 
gital  filter  used  for  sp(*ctral  corrections,  tlie  numerical  (h'rivative  cif  the  disc  rate  inm - 
tion  f(n)  is  computed  solving  tht*  (irst  order  difference  (‘<iuation  involving  ihv  present 
and  past  values  of  the  computed  f(n).  Smoothing  out  tlu'se  iiiunei’ ica  1  results, tin*  4  \(  it  al  jon 
vector  (19)  is  obtained*  The  actuating  signals  for  tl\t‘  M.C.l'.s  aituators  am*  g«‘nerated  ap¬ 
plying  to  the  computed  numerical  data  the  appropiate  wetighting  coe  t  lit  rents  which  ar<*  <v-.ta 
blished  taking  into  accoiuit  the  different  M.C.t,  authority  in  g<‘nerating  the  conti'ol  mo¬ 
ments.  This  regulation  process  is  implemcnte<|  mu  Hi  plying,  tlu*  computed  dist  ictc*  fumt  ion 
f(n)  by  a  different  set  of  niimt'iical  values  <^stablishod  lor  t  ht*  prO[)ort  ional  and  derivati¬ 
ve  gains,  collected  in  data  vectors  and  stored  in  the  t  omputer  mimioi’i(*s;  t  lu*  resulting  ac  ¬ 
tuating  data  are  adressed,  through  a  multiplexc'r  and  smoothing  luiits,  to  the  rc'spc'c  (  ivc* 
M.C.U.  input. 

5  -  Master  M.C.U.  implementation 

The  master  M.C.U.  is  implemcmtc'd  as  an  elc'ctro-optical  system  integrated  with 
the  supporting  structure  on  which  tlie  active  control  (‘I'forts  ar<^  appli<‘d;  it  consists, 
of  an  optical  sensor  with  its  electronic  back-up,  a  mi croprocc'ssor  which  has  a  fimction  of 
central  processor  for  the  decentralized  modal  control  units  distributed  along  the  mast  and 
a  force  actuator  developing  the  active  force  excitation.  In  Fig, 6,  the  systemistlc  scheme 
of  the  master  modal  unit,  as  it  has  been  in  principle  conceiv(?d,  is  given.  On  the  basis 
of  knowledge  of  the  general  characteristics  of  the  existing  engineering  products  offered 
by  the  present  aerospace  technology,  this  modal  control  package*  is  (xpected  to  liave  a 
mass  which  is  a  very  few  percent  of  the  supporting  mast  bay. 

In  the  following  the  general  infoi  mations  on  the  f^asterr  M.C.U, ’s  constituetit 
components  are  given. 

-  The  electro-optical  sensor 

To  measure  the  angular  rotation  of  the  asstuned  mast  reference  section  due  to  bt'n 
ding  deformations,  an  optical  sensor  is,  in  terms  of  resolution,  reliability  and  installa¬ 
tion  flexility,  the  most  convenient  for  L.S.S.  applications.  The  sensor  taken  into  consi¬ 
deration  in  this  study,  tending  mainly  to  investigate  the  system  feasibility,  is  a  parti¬ 
cular  application  of  the  device  presented  in  Ref.  2  as  a  position  encoding  sensor  for 
static  shapes  measurements  in  L.S.S.  structures.  Here  this  kind  of  sensor  is  adapted  to 
measure  the  angular  displacement  of  the  mast  reference  section  in  respect  to  a  specified 
set  point.  This  device  uses  a  coaxial  tr asmitter-recei ver  pulsed  laser  diode  sensor  witli 
a  swepting  capability  in  a  specified  angular  range.  By  means  of  a  pliotosensitivo  detector 
the  angle  (  S  )  of  the  laser  beam  streaking  a  reflector  point  in  the  mast  section  idt'ntl- 
tying  the  observed  reference  section  in  respect  to  the  laser  optical  axis  and  the  distan¬ 
ce  (d  )  of  the  reflector  from  the  collimator  laser  lens,  are  measured,  basic  princi¬ 

ple  in  the  measurement  process  is  that  the  emitted  and  returiuxl  I'adiatron  I'rom  the  r('fl<*c- 
tor  detected  by  the  laser  h<*ad  ar<',  with  a  time  d<'lay  introduced  by  a  fibei*  optic  luiit, 
imaged  on  a  photosensitive  array  where  the  relative  <  oordinatc's  art^  observed  and  mt'asiuu'd. 
The  signal  at  the  photos<?nsiti  ve  devi(  <*  output  is  [u-oeessed  by  a  mi  croprocessor  whc*rt*  tli<* 
geometrical  relation  the  measured  quantities  and  <1  and  the  angle  (  9^  )  1  hroxigh  wi\ith 

the  supposed  untwisted  rtdererice"  sect  ion"  h.as  rotatexJ  in  r<*sp(*(t  lo  a  nominal  r('l  er<iu“4*  [)la 
ne,  is  solved  for  the  last  unknown  queantity.  If  this  arrang^'mc'nt  iiu  luch  s  a  di  .s(  pet  (*  num¬ 
ber  of  reflectors  on  the  reference  s(»ction  the  angular  mf'asnrc'ments  can  l)e  <  orrc'c  ted  1)> 
the  twisting  effects  on  the  observed  section.  This  <*lc^tro-opt  i<  al  cleviac*,  which  is  expec¬ 
ted  to  have,  in  the  structural  shape*  measurements,  an  accuracy  in  tin*  ordc'r  of  0,24.0, 00 j 
mm,,  when  used  in  the  angular  measurc'mcmt.s  may  have  a  rc*solut.ion  in  t  lu*  oi’dc  r  of  O,  1+2 
arc-second  which  i.s  considered  satisfactory  for  the*  L.S.S,  app  I  i  c  at  i  on  s , 

-  The  central  processor  unit 

The  central  processor  unit  in  the*  modal  cc^iitrol  i  an  hi  gli  •^{xcd-iM-.i  1  (  i- 

me  microprocessor  implemented  with  mulplic*r-accumii.lat.or  units  otlc'i'ccl,  Kc'f  >  ,  !>>  (In* 
pr’csent  advanced  technology  which  allow  to  build  an  <*xtrem('ly  (  ft  i<  iciit  data  aritlinut  ic 


unit;  this,  when  supported  an  appropriate  control  imit ,  can  solve  time  and  t'reiiuency  do¬ 
main  algorithms  like  those  involved  in  digital  filtering  and  spectral  analysis. 


The  modal  control  process  developed  loy  the  central  processor  is  based  on  the 
following  computing  stages: 

-  temporary  storage  in  the  computer  dynamic  memory  area  of  the  angular  displaceminiL  da¬ 
ta  delivered,  through  an  A/d  converter,  by  the  electro-optical  sensor 

-  Computation  of  the  angular  displacement  spectrum  A  (k) 

-  Extraction  from  the  ROM  memory  area  of  the  stored  model  error  spectrum  I,  (k) 

-  Computation  of  the  feedback  spectrum  F(k)  as  a  sum  of  the  two  spectra  A  (k)  and  E  (k) 

r  m 

-  Corrections  applied  to  the  feedback  apectriun  F(k)  by  digital  filtering 

-  Computation  of  the  discrete  feedback  function  f(n)  by  means  of  the  I.F.I'.T.  algorithm 
application 

-  Computation  of  numerical  derivative  of  the  discrete  feedback  fiuiction  f(n) 

-  Multiplication  of  f(n)  by  the  gain  matrix  elements  stor<‘d  in  the  ROM  area 

-  Selection  of  the  output  control  vectors  to  be  routed,  via  external  multiplexing,  to  the 
M.C.U.s  inputs. 


-  Force  Servo  actuators 

To  provide  the  distributed  active  actuations  in  the  modal  control  process,  D.C. 
force  actuators,  each  capable  of  exerting  a  force  up  to  2.24  N,  with  a  resolution  of 
0,01  N,  has  been  considered.  The  intensity  of  forces,  applied  to  the  center  of  mass  of 
the  mast  section  by  the  servo  actuator  supported  by  the  structural  elements  of  the  pre¬ 
ceding  bay,  depends  on  the  excitation  level  established  by  the  central  processor. 

6  -  Slaved  M.C.U.  implementation 

The  slaved  M.C.U.  is  simply  implemented  with  an  electrical  linear  displacement 
pick-up  connected  to  the  bay's  longitudinal  bar,  a  force  actuator  and  the  common  devices 
included  in  a  feedback  servosystem. 


7  -  Design  parameters  specification 

To  plan  the  active  controll  process  based  on  2-radix  decimation  in  time  F.F.T. 

algorithm,  specifications  on  the  following  design  parameters  are  required: 

-  Spectrum  recurrence  frequency  ( ~  For  a  general  band  limited  complex  function,  the 
correspondent  discrete  Fourier  transform  yields  a  sequence  of  periodic  spectra  at  fre¬ 
quence  f^ 

-  Spectrum  bandwidth  BW  -  Each  spectrum  will  span  a  frequency  range  the  length  of  which 
is  the  frequency  bandwidth  relative  to  the  frequency  contents  of  the  the  transformed 
time  function.  To  cover  the  full  signal  bandwidth  (Bw)^  must  be: 

BW  =  (BW) 

s 

-  Number  of  points  in  the  F.F.T.  spectrum  (NF)  -  The  spectriun  at  the  processor  output 
will  appears  as  un  NF-points  discrete  function.  The  2-radix  F.F.T.  algorithm  is  bused 
on  a  number  of  spectral  points  which  is  a  power  of  two: 

NF  =  2'’  (P  =  1,2,  ...)  (  22) 


-  Frequency  resolution  ( Rp 
two  consecutive  spectrum 


)  -  It  is  defined  as  the  minimum 
lines : 


RP 


NF 


frecjucncy 


separation  between 


(  23) 


-  Sampling  time  (T  )  -  The  time  interval  corresponding  to  sampling  procivss  on  the-  obser¬ 
ved  time  function  is  related  to  the  spectrum  bandwidth  by: 


T  = 


2  Jl 


s  BW 


(24) 


The  sampling  frequeiicy: 


s  T 


must  be  verified  for  the  Nyqui.st  criteria  to  avoid  aliasing  and  ripple  on  the 

computed  F.F.T.  spectrum 

-  Number  of  time  function  samples  (NT)  -  In  order  to  accomodate  tin'  disc  ret  <*  nature  of 
the  Fourier  transform  and  to  obtain  significant  advantages  In  th(‘  pro<  (‘ssoi  hardware 


and  software,  the  number  of  samples  for  the  tiie  time  fiuictioii  to  be  transl’ornuul  is  set 
equal  to  the  number  of  points  in  the  correspondent  F.F.T.  spectrum: 

NT  =  NF  =  M  ( 2; ) 

-  Time  function  observation  time  ( )  ”  fhe  time  function  to  be  F.F.T,  transformed  is  ob¬ 
served  in  a  single  o  repetitive  time  slots  lasting: 

=  M.  T  (26) 

t  s 

For  the  model  following  active  control  design,  the  F.F.T.  spectriun  bandwidth  and  resolu¬ 
tion  for  a  N— degree  of  freedom  structure  are  respectively  referred  to  the  highest  and  low 
est  natural  frequencies  in  the  range  including  the  actual  (A)  and  model  (M)  model  frequen¬ 
cies  : 


BW  > 

max 

(a,m) 

(  f  ) 

^  n  N=N 

max 

(27) 

Rp  < 

min 

(s,m) 

(  f  )  N=Nmin 
n 

(28) 

In  the  present  study  the  dsodel  spectrun>  has  been  chosen  referring  to  an  ideal  structure 
having  the  same  geometric  and  mass  distribution  of  tlie  actual  mast  structure  but  with 
greater  stiffness  product  (El).  The  natural  frequencies  ( fn)  for  the  proposed  model  struc 
ture  are  shown  in  Table  I  where,  for  comparison  purpose,  the  correspondent  values  for  the 
actual  structure  are  also  indicated.  In  the  same  table  the  values  of  the  linear  (  ()  8  ) 
and  angular  (  a  )  static  displacements  relative  to  the  mast  reference  section  due®  to 
the  unit  force  (t  N.)  applied  to  the  mast  tip,  are  given.  In  Table  2  the  D.F.T.  data  adop¬ 
ted  in  the  application  treated  in  this  study  are  specified 


TABLE  I  -  Model  elastic  characteristics 


Datum 

Dim . 

Model  Struct . 

Actual  Struct . 

El  =  3.57  10  (Nm  ) 

El  =  1.57  10  (N.m  ) 

R 

<5 

m. 

1.29108  lo"^ 

2.9377  10"^ 

s 

R 

deg. 

8.5122  10”^ 

19.4851  10"^ 

s 

a 

f 

"1 

Hertz 

0.2857 

0.189458 

f 

11 

2 

II 

1.70541 

1.14449 

f 

n 

3 

M 

10.3125 

6.3775 

f 

n 

4 

11 

16.5029 

9.91715 

f 

”5 

M 

35.39 

23.2937 

TABLE  2  -  D.F.T.  process  data  specifications 


Datum 

Dim . 

Value 

Ref. 

BW 

rad/sec 

393.672 

Eq.  (27) 

NF 

N.D. 

32 

"  (22) 

RF 

rad/sec 

12.30225 

"  (28) 

T 

sec  • 

0.  i960 

"  (24) 

s 

so.  , 

_ 

0.510735 

"  (26) 

Referring 
are  defined 


to  the  preceding  data  specifications  the  following  processor  characteristics 
in  order  to  evaluate  the  computational  effort  involved  in  the  F.F.T,  pro¬ 


cess  . 


Data  word  len^h  (NB)  -  The  digital  data  word  length  determines  the  accuracy  in  the 
F.F.T.  computation,  i.e,  the  maximum  error  that  can  be  found  in  the  output  spectrum  nu¬ 
merical  values.  The  data  word  length  is  chosen  to  satisfy  the  basic  requirement  esta¬ 
blished  for  the  maximum  allowable  error  for  the  observed  output  variable  and  incremen¬ 
ted  by  an  additional  number  of  digits  in  order  to  compensate  for  the  lost  in  numerical 
precision  exhibited  in  the  sucessive  F.F.T,  computational  stages.  Indicating  with  E  the 
maximum  error  predicted  for  the  observed  state  variable,  the  word  length  required  for 
the  accuracy  will  be  given  by: 


t:  = 


,ND 


(  29) 


-  I 


The  size  word  growth  necessary  to  maintain  the  desidered  accuracy  through  the  F.F.T.  pro¬ 
cess  can  be  evaluated  in  one  bit  for  every  two  F.F.T.  compuational  stages. 


-  Number  of  operations  per  butterfly  (N^p)-  For  a  general  complex  input  forcing  function 
each  butterfly  requires  four  real  multiplications  and  2  real  additions 


-  Number  of  machine  cycle  per  operation  (C  )  -  For  the  class  of  microprocessor  considered 
in  this  study,  the  sum  of  two  sucessive  products  takes  two  machine  cycle  (T  )  and  the 
data  handling  in  and  out  the  working  memory  locations,  as  required  to  apply  the  "in 


place"  F.F.T.  technique,  is  performed  in  four  machine  cycles. 


-  Number  of  machine  cycles  per  butterfly  (Cg)  -  For  the  considered  microprocessor,  six  ma 


chine  cycles  are  required  per  a  butterfly  computation 


-  Number  of  butterfly  blocks  per  F.F.T.  computation  (N„)  -  It  is  expressed  by: 


log2  M 


(30) 


-  Number  of  machine  cycles  for  F.F.T,  computation  (C  ): 

F 


(31) 


Time  required  for  F.F.T,  computation  (T„): 

r 


T  C 
F  F 


(32) 


-  static  storage  (Sp_„)  -  This  requirement  depends  on  the  number  of  coefficients  involved 
in  F.F.T.  and  digital  filtering  algorithms  to  be  stored  in  the  processor  R.O.M.  memory 
area 


-  Temporary  storage  (S„,„)-  The  R.A.M,  area  is  dimensioned  in  function  of  the  total  num¬ 
ber  of  words  involved  in  the  tansit  data  flow. 


Referring  to  the  above  mentioned  definitions,  the  general  characteristic  od  the 
F.F.T,  dedicated  microprocessor  considered  in  this  study  are  shown  in  Table  3, 


table  3  -  F.F.T,  processor  characteristics 


Datum 

Dim . 

Value 

Ref . 

NB 

N.D. 

8 

Eq.  (29) 

K, bytes 

1 

_ 

ROM 

®RAM 

K. bytes 

2 

- 

M 

T 

N.D. 

-6 

10  sec. 

32 

1 

Eq.  (22) 

c 

N.D. 

6 

OB 

N.D. 

6 

- 

^B 

N.p. 

160 

Eq.  (30) 

^F 

10  ^  sec, 

10  sec  • 

0,96 

3,2 

Eq.  (32) 

tot 

In  Table  3  is  also  indicated  te  total  time  (1^^^,^,)  required  to  compute  the  fil¬ 
tered  discrete  feedback  function  f(n)  given  in  ( 14)  from  the  analog  data  observed  in  a 
time  slot  established  in  Table  2. 

The  M.C.U.  servosystem  rlesign  includes  the  following  parameters: 


-  Electro-optic  sensor  resolution  (R^) 

-  Force  servoactuator  resolution  ( Rp) 

-  M.C.U,  control  stiffness  (Rg,j,) 

-  Sensor  Trasducer  gain  (K.^,) 

-  ADC  full  scale  voltage  (FSV) 

-  ADC  resolution  (R^Op) 

-  Servoactuator  gain  ( ) 

The  forces  applied  to  the  M.C.U.s  structure  obey  a  sinusoidal  distribution  with  an  angu¬ 
lar  frequency  fixed  at  4,5  rad/sec.;  These  forces  have  the  same  [jhase  but  different  ma¬ 
gnitude  depending  on  the  M.C.U.  location  along  the  mast.  To  operate  with  different  con¬ 
trol  authorithy  at  various  grid  points,  the  gains  on  the  excitation  signals,  routed  from 
the  processor  output  to  the  M.C.U.s,  are  regulated  as  indicated  in  TAble  4 


TABLE  4  -  Control  gains 


Gain 

Dim . 

— 

Value 

R 

s 

miad 

9.68 

^F 

N. 

0.01 

*^ST 

N/rad 

10'^ 

volts/rad 

60 

FSV 

volts 

10 

’^ADC 

volts 

39.  16^ 

•'i 

rad/ amp , 

O.O837 

K  (M.C.U.-l) 

p 

N.D. 

0.01144 

K  (M.C.U. -2) 

N.D. 

0,03432 

K  (M.C.U, -3) 

A  .D, 

0.0572 

K  (M.C.U. -4) 

P 

N.D. 

0.08151 

K  (M.C.U. -5) 

P 

N.D. 

0.  10295 

6  -  The  modal  control  system  simulation 


In  order  to  evaluate  the  control  performances  of  the  proposed  modal  control  sy¬ 
stem,  a  simulation  software  program  was  developed;  it  consists  of  three  major  blocks  re¬ 
flecting  the  effective  system  configuration  and  characteristics.  In  the  first  block  the 
structural  model  describing  the  elastic  behaviour  of  the  flexible  mast  in  terms  of  the 
normalized  coordinates  is  formulated.  The  program, in  this  stage^solves  the  eigenvalue 
problem  and  computes  the  unforced  and  forced  dynamical  time  responses,  the  last  one  re¬ 
ferred  to  a  specified  distributions  of  the  active  control  forces,  which  are  introduced 
as  a  set  of  input  data  directly  delivered  by  the  program  section  simulating  the  control 


process . 


The  forced  rensponse  under  an  established  forces  distribution,  is  programmed 
by  computing  the  normalized  modal  matrix  consisting  of  orthonormal  modal  vectors,  by  means 
of  which  the  generalized  force  vector  be  is  defined.  The  uncoupled  second  order  differen¬ 
tial  equations  describing  the  system  forced  dynamics,  are  solved  for  the  transformed  ge¬ 
neralized  coordinates;  after  the  transformation  back  to  the  original  generalized  coordi¬ 
nates,  the  complete  response  solution  is  obtained  and  used  to  determine  the  linear  and 
angular  displacements  of  the  mast  reference  section,  which  are  the  final  output  data  for 
the  structural  program  block.  The  second  program  block  is  devoted  to  solve  the  F.F.T. 
algorithm  yielding  the  discrete  Fourier  transform  of  the  feedback  function  which,  when 
filtered,  transformed  in  time  domain  and  weigthed  by  appropiate  gains,  yields  the  con¬ 
trol  levels  used  as  input  for  the  next  program  block;  here  the  functional  characteristics 
of  the  active  control  process,  as  it  takes  place  in  the  central  processor,  are  simulated. 
The  force  distributions  in  module  and  sign  at  the  different  mast  grid  points  obtained  in 
this  program  section  are  used  as  input  data  to  the  structural  progr;un  block  computing 
the  mast's  forced  responses.  From  the  program  output  data  the  control  system  performan¬ 
ces  in  terms  of  the  antenna  pointing  accuracy,  can  be  evaluated  by  inspection.  As  refe¬ 
rence  objective  in  the  design,  the  antenna  line  of  sight  pointing  acccu-acy  of  the  order 


of  1t2  arc-second,  as  expected  in  the  L.S.S.  space  mission  to  provide  .idequ.a  e 
tion  service  from  a  low  earth  orbit  (500  Km.)  has  been  assumed. 


c  vimiuuii  i  1  .1- 


n 
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7  -  Simulation  results  and  conclusions 

In  Table  5  the  simulation  results,  expressed  in  terms  of  antenna  iingular  displa 
cements  averaged  in  the  time  slot  established  for  the  spectral  process,  are  shown,  iwo  ca¬ 
ses  are  considered: 

-  Averaged  antenna  angular  displacement  with  the  active  modal  control  inoperative: 

^  “  r^INOP 

-  Averaged  antenna  angular  displacement  with  the  active  modal  control  operative  witli  the 
gains  regulated  as  indicated  in  the  preceding  section: 


In  both  cases  the  initial  conditions  were  fixed  considering  the  mast  deflected 
from  its  reference  position  to  assujne  a  static  deformation  obtainable  with  a  iu>it  force 
applied  to  the  mast  tip. 

The  values  given  in  Table  5  are  relative  to  the  simulation  referred  to  the 
first  bending  mode  of  vibration.  In  the  same  Table  is  indicated  tlie  av'eraged  angular  dis¬ 
placement  (a  the  master  section  of  the  assumed  model  structure  in  its  phisical  rea¬ 

lity  and  submitted  to  the  same  initial  conditions. 


TABLE  5  “  Antenna  angular  displacement 
Averaged  on  S^=  0.510735  sec. 


(  “  ) 

^  r-^INOP 

- - 1 

deg. 

0.0147 

(  a  ) 

II 

0.0054193 

r  OP 

n 

0.005956 

E  „ 

% 

8.9 

mf 

Aa^ 

% 

36.8 

in  Table  5  are  indicated  also  the  percent  error  (E  j.)  observed  in  the  model  following 
process  and  the  percent  antenna  average  angular  (  )  displacement  reduction  obtained 

with  the  active  modal  control  in  respect  to  the  value  obserted  for  the  |>are  mast.  The  dy¬ 
namical  behaviour  of  the  actual  mast  with  reference  to  the  model  structure  is  presented 
in  Fig.  7, 

These  results  and  others  not  presented  here  for  reason  of  report  lengih  ,  indi¬ 
cate  that  the  proposed  active  modal  control  is  a  fcasablo  process  capable  to  satisfy  the 
requirement  indicated  for  L.S.S.  space  mission. 
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SUMMARY 


In  the  control  design  of  a  large  flexible  space  vehicle,  a  finite  element  model  is  truncated  and  the 
control  system  is  designed  on  the  basis  of  the  reduced  order  model.  This  paper  discusses  the  step  -  by  - 
step  application  of  f requency-shaped  Linear  -  Quadratic  -  Gaussian  methodology,  as  well  as  payoffs  and 
costs  of  this  method.  The  procedure  for  choosing  and  forming  both  state  and  control  frequency  -  weightings 
is  shown.  Treating  the  unmodelled  dynamics  of  the  structure  as  a  source  of  plant  uncertainty,  stability 
robustness  evaluation  was  discussed.  Practical  usefulness  of  the  singular-valued  closed-loop  performance 
analysis  and  its  possible  improvement  are  also  discussed. 

\  ' 


1.  INTRODUCTION 


Designing  control  systems  for  large  scale  systems,  in  particular,  large  space  structures,  has 
produced  a  great  deal  of  discussion  in  the  control  community  recently  [1-5].  Some  of  the  major  problems 
that  have  been  highlighted  are  1)  the  difficulty  of  accurately  modeling  the  structure,  2)  trying  to 
design  control  systems  for  the  resulting  very  high  order  system  model,  usually  resulting  in  the  need  to 
reduce  the  model  order  in  order  to  design  and  implement  Che  control  system,  3)  the  fact  that  many  of  clie 
resultant  structural  modes  lie  within  the  bandwidth  of  the  controller,  and  will  be  affected  by  its  use, 

4)  the  extremely  low  natural  damping  of  the  structure,  allowing  any  "mispla''ed”  control  energy  (spillover) 
to  easily  drive  the  system  unstable,  5)  the  fact  that,  in  general,  the  more  the  controlled  modes  are 
forced  into  the  ieft-half  s-plane,  the  more  ’’misplaced"  control  energy  there  is  likely  to  exist,  and 
6)  the  fact  that  the  structure  must  be  autonomous,  while  sensors  and  actuators  for  this  type  of  application 
are  likely  to  be  quite  costly,  thereby  requiring  careful  consideration  when  determining  the  number  of 
sensors  and  actuators  to  be  used.  There  are,  of  course,  other  factors  involved  which  require  attention. 

The  paper  is  organized  as  follows.  Section  2  gives  the  background  for  the  reduced  order  control 
design  and  shows  the  need  to  shape  the  quadratic  weights.  Section  3  describes  the  frequency-shaped  LQG 
design  methodology.  The  effects  of  shaping  the  state  weighting  alone,  control  weighting  alone,  and  both 
state  and  control  weighting  on  the  design  are  explained  in  Section  4.  It  also  discusses  the  relationship 
between  shaping  the  state/control  weightings  and  the  use  of  dynamic  compensators/  shaping  filters. 

Control  systems  are  designed  for  two  simple  examples  in  Section  5.  Section  6  discusses  the  use  of  singular 
values  for  robustness  evaluation  and  for  analyzing  the  closed-loop  performance.  Section  7  considers  the 
first  example  from  Section  5  and  explains  the  difficulty  in  using  the  singular  values  for  robustness 
evaluation.  It  also  explains  the  need  for  integral  control.  Finally,  Section  8  summarizes  the  conclusions 
of  this  paper. 

2.  BACKGROUND 

In  this  paper,  attention  will  be  given  solely  to  design  methods  which  use  finite  element  models  of  the 
structure  versus  those  which  start  with  partial  differential  equation  representations.  Obviously,  since 
the  actual  structure  has  an  infinite  number  of  modes,  the  initial  model,  though  very  high  order  (200  or 
more  modes  for  extremely  large  structures),  still  has  modeling  errors.  These  are  errors  which  cannot  be 
modeled  and  thus  require  a  very  robust  control  system  if  they  are,  in  fact,  important  to  the  stability  and 
performance  of  the  structure.  Tliese  errors  will  not  be  expressly  addressed  here,  but  would  need  to  be 
considered  before  any  real  implementation  of  a  control  system. 

Assuming  now  that  a  very  high-order  finite  element  model  of  the  structure  is  available,  a  controller 
must  be  designed.  It  is  reasonable  to  assume  that  the  high  frequency  end  of  the  model  is  not  very  accurate, 
due  to  limited  knowledge  of  the  structural  behavior  at  high  frequencies.  Due  to  computational  considerations 
(software  routines  and  actual  processor  hardware)  and  the  liigh  frequency  inaccuracies,  the  large  model  must 
be  reduced  in  order  to  allow  control  design  and  implementation.  Several  methods  for  doing  this  have  been 
proposed  [5  -  6]  which  take  into  account  the  "weight",  controllability,  observability,  etc.,  of  the  various 
modes.  This  process  results  in  a  "design  model",  versus  the  previous  large  model,  called  the  "evaluation 
mode  1" . 

Now  a  model  is  available  to  perform  a  control  design  upon.  Linear-Quadratic-Gaussian  (LQG)  metliods 
appear  to  be  well  suited  to  the  multivariable  nature  of  the  problem,  and  will  form  the  basis  for  the 


method  proposed  here.  However,  due  to  the  complex  nature  of  the  problem,  there  are  problems  associated 
with  the  use  of  standard  LQG  design.  Tlie  evaluation  model  may  be  represented  by  state  Lind  output 
equations  of  the  form 


A  0 
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-  primary  srate  vector 

X  -  residual  state  vector 
r 

u  -  control  vector 
w  -  process  noise  vector 
v  -  measurement  noise  vector 
Assume  now  that  the  design  model  is  of  the  form 

X  =  Ax  +  Bu  +  Dw 
P  P  P  P  p 


with  measurements 


y 


P 


C  X  +  V 
P  P 


The  control  u  is  selected  to  minimize  the  performance  index 


(3) 

(A) 


r®  T  T 

=  j  (x  Q,x  +  u  R^u)  dt 

*  pip  1 


(5) 


and  is  given  by 

u  =  -Kx 


(6) 


where 


-1  T 

K  =  R,  B  E, 

1  p  1 


0  =  A  ^E,  +  E,A  -  E  B  R  ■'■B  ^E,  +  Q, 

pi  Ip  Iplpl  1 


(7) 

(8) 


with  and  Rj^  being  constant,  symmetric,  positive  semi -definite  and  positive  definite  matrices,  respectively 


chosen  by  the  designer  [  7  ].  x  is  an  estimate  of  the  controlled  state  produced  through  a  Kalman  filter. 


given  by 


Ax  +  Bu  +  M[y-y 
P  P  P 


=  C  X 
P  P 


(9) 
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where 


T  -1 


E.A  ^  +  A  E-  -  E-C  ^R.  C  E_  +  D  Q,D  ^ 

2p  p2  2p2  p2  p2p 


(11) 

(12) 


with  Q2  and  R^  being  the  strengths  of  the  zero-mean,  white.  Gaussian  process  and  measurement  noises, 


respectively.  Substituting  the  control  law  and  augmenting  the  state  estimates  produces  the  closed-loop 
design  model 


P 

MC 


-B  K 
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A  -  B  K  -  MC 
P  P  P 


(13) 


which  can  be  adjusted  for  closed-loop  s tab!  11  ty /perf ormance  through  the  choice  of  and  R^^.  I'owever,  this 

control  law  must  be  substituted  into  the  evaluation  model,  as  it  is  a  more  accurate  model  of  the  real 
structure.  Doing  this  yields 
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The  terms  B^K  and  MC^  are  called  control  and  observation  .spillover,  respectively.  As  can  be  easi  Jy  seen . 

these  terms  affect  the  location  of  the  poles  of  the  design  model  (ef|nation  [111)  as  well  as  the  snppres.sed 
poles  (eigenvalues  of  A  ),  and  they  affect  the  performance  as  well.  Since  the  suppressed  poles  have  very 


low  open-loop  damping  and  are  high  frequency*  they  lie  very  close  to  the  imaginary  axis  in  the  s-plane. 

If  they  are  "pushed"  to  the  right  by  the  spillover  at  all,  they  quickly  go  unstable.  Readjusting  and 

to  prevent  this  (the  only  means  available  for  the  given  design  model)  can  cause  a  drastic  loss  of  closed- 
loop  damping  in  the  design  model  poles,  in  some  cases  to  the  point  where  almost  no  closed-loop  improvement 
in  damping  is  possible. 

Note  that  as  long  as  a  Kalman  filter  (or  an  observer)  is  used,  both  control  and  observation  spillover 
are  present.  When  all  of  the  states  are  available  for  measurement,  only  control  spillover  will  occur. 

In  this  case,  the  closed-loop  stability  will  not  be  affected  by  the  suppressed  modes,  but  the  performance 
will.  In  other  words,  the  closed-loop  evaluation  model’s  eigenvalues  will  be  those  of  the  design  model  plus 
those  of  the  residual  model  by  themselves,  but  the  resulting  eigenvectors  will  be  different,  thus 
affecting  performance. 

There  are  a  number  of  ways  to  overcome  the  stability  problem  when  a  Kalman  filter  is  present. 

By  properly  selecting  K  or  by  properly  selecting  actuator  locations,  the  rows  of  the  matrix  can  be  made 

orthogonal  to  the  columns  of  the  K  matrix  [8].  Another  method  is  to  minimize  the  control  spillover  by 
including  the  term  B^u  in  the  cost  function  J  which  is  being  minimized  [3].  The  problem,  however,  is 

arising  from  the  fact  that  the  penalty  matrices  and  penalize  the  states  and  controls  by  the  same 

amount  at  all  frequencies.  A  method  to  overcome  this  problem  is  now  presented. 

3.  FREQUENCY-SHAPED  LQG  DESIGN 

One  way  to  avoid  constant  penalties  is  the  use  of  f requency -shaped  cost  functionals  [  7  ],  which  is  an 
extention  of  standard  LQG  design.  In  this  method,  the  performance  index  to  be  minimized  is  assumed  to  be 
a  function  of  frequency  as  follows 

00 

J  =  ~ —  /_^  [Xp  *  (ju)  (joj)Xp  (ju)  +  u*(jiij)Rj^(jw)u  (Ju)  ]  du)  (15) 

2ii 

Note  that  here  the  weighting  matrices  and  are  functions  of  frequency,  rather  than  constant  matrices. 

Furthermore,  for  ease  of  application,  they  are  assumed  to  be  rational  functions  of  frequency  squared,  . 

Q|(Jw)  must  be  positive  semidefinite  and  Rj^(ju))  must  be  positive  definite.  It  is  rel.atively  simple 

(see  Appendix  A)  to  do  a  spectral  factorization  on  Qj^  and  R^^  to  produce 

q^(Ja))  =  Pj_*(jo))P^(,1m)  (16) 

R^(ju)  =  P2*(Jw)P2(.iw)  (17) 

where  Pj^  and  P^  are  rational  matrices  containing  all  of  the  resulting  left-half  plane  poles  and  zeros. 

Both  P^  and  P^,  in  general,  have  no  restrictions  upon  the  number  of  poles  and  zeros  they  contain.  Now  defining 


P^(j<.)Xp 


p2(jti))u 


the  performance  index  of  (L5)  may  be  written  [using  equations  (16  and  17))  as 
J  =  -  j  [x^  (jw)x^'(  ju)  +  u^  ( ja))u^  ( jui)  ]dw 


Pj^  and  p2  may  be  thought  of  as  transfer  functions  to  shape  tlie  old  state  and  control  vectors,  and  u, 

into  new  ones,  x  and  u  .  Therefore,  minimal  realizations  of  tliese  transfer  functions  may  be  obtained. 

These  realizations  take  on  slightly  different  forms  depending  upon  the  relative  number  of  poles  and 
zeros  in  the  transfer  functions.  From  equation  (18),  a  general  expression  is  given  by 

z^  =  F^z^  +  G^Xp  (2 


X  =  H ,  z  +  D ,  X 

11  ip 


where  z  is  a  new  additional  state  vector,  j  is  the  ntimber  of  zeros  minus  the  number  of  pules  in  P  ,  and 

(t)  ^  ^  ^ 

X  is  the  ith  derivative  of  x  .  it  j,  is  negative,  D,  0  and  the  summation  is  zero.  It  j  is  zero 

P  P  L  1  1 

(equal  number  of  poles  and  zeros)  the  siimmatlon  is  zero  and  there  is  a  feedforward  term  x^.  i'Hien  j  equals 

one,  the  summation  term  contains  a  feedforward  term  x  ,  which  ran  be  replaced  by  the  original  design  mculel 

P 


state  equations,  and  this  case  may  still  be  handled  in  a  straightforward  manner.  Defining  greater 
than  one  requires  knowledge  of  the  second  or  higher  derivative  of  x  and  will  not  be  developed  here, 
as  no  practical  applications  have  been  found  for  this  case. 

The  realization  for  equation  (19)  is  slightly  more  complicated  and  requires  further  examination. 
If  has  a  greater  than  or  equal  number  of  poles  than  zeros  the  development  is  straightforward  and 

equation  (19)  may  be  represented  by 


^2 

=  "2^2 

+  G2U 

i 

u 

=  H^z, 

+ 

(2  3) 
(24) 


If  the  chosen  P^  is  of  this  category,  and  P^^  has  no  more  than  one  excess  zero,  all  possible  choices  of 
Pj^  and  P^  result  in  developments  of  a  similar  form,  and  will  be  referred  to  as  Form  1.  If,  however, 

has  more  zeros  than  poles,  the  form  diangcs  slightly  and  will  be  referred  to  as  Form  2.  The  different 
developments  will  not  be  shown  in  detail  in  this  paper;  only  the  final  results  will  be  given, 

3.1  FORM  1 


The  open-loop  augnented  system  is 
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(28) 
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where  A  ,  B  ,  D  ,  C  ,  and  x  are  the  corresponding  matrices  and  vector  in  equations  (25)  and  (26). 

The  F^,  and  matrices  are  found  from  the  realizations  of  the  chosen  weighting  matrices  (shown  in 

detail  in  the  examples).  Since  j ^  =  1  in  this  case,  equations  (22)  and  (24)  may  be  rewritten  as 


iDi  + 


D,,A 
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(2  9) 


u  =  [  0  0  ]  [Kp  Zj^  z^  u]  (10) 

Substituting  (29)  and  (30)  into  (20)  and  transforming  to  the  time  domain  yields  the  expressions  for 


Q^,  and  N 


J  =  L  [  X  .  u  ’ 


where 
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The  feedback  law  that  minimizes  equation  (31)  is  determined  as  follows: 


u  =  -K.x  -  K._z,  -  K„2_ 
Ip  2  1  3  2 
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(Ej^B^  +  N)  (EjB^  +  N)^ 


(15) 


Note  that  equations  (3A)  and  (35)  contain  an  N  matrix  as  well  as  the  usual  and  R^.  This  is  due  to  the 

cross-coupling  between  the  x  vector  and  the  u  vector.  The  modified  Riccati  equation  is  transformed  into 
one  of  a  suitable  form  for  computer  solution  in  Appendix  B. 


The  state  estimation  equations  are 


=  Ax  +  Bu  +  M[y-y] 
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and  and  R^  are  as  in  equations  (12).  The  closed-loop  evaluation  model  then  becomes 
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Note  that  the  third  equation,  when  written  out,  is 
"l 


F.z.  +  G  X 
11  Ip 


(41) 


This  change  (from  x  to  x  )  Is  necessary  since  it  Is  assumed  here  that  Is  not  available  for  measurement, 

and  causes  no  problems  in  the  control  gain  determination  as  it  is  standardly  assumed  that  the  two  problems 
(control  and  estimation)  are  decoupled,  i.e.  x^  =  Also,  note  that  both  control  and  observation  spillover 

are  present  —  however,  the  designer  now  may  have  more  ability  to  reduce  their  affect  by  selecting  different 
frequency  shapings.  This  is  best  seen  further  on  in  the  examples. 


3 . 2  FORM  2 


In  this  case  the  degree  of  the  numerator  of  is  higher  than  the  degree  of  the  denominator. 


This  requires  feeding  forward  u  or  a  higher  derivative  of  u.  For  a  system  with  one  more  zero  tlian 
pole,  the  f requency -shaping  states  for  the  control  weighting  are 


F2Z2  +  G^u 


u  =  +  D.,  u  +  021*^ 


(42) 

(43) 


which  has  the  block  diagram  shown  in  Figure  1.  The  highlighted  differentiator  block  is  tronblesomo. 

An  equivalent  block  diagram  is  shown  in  Figure  2.  Tliis  avoids  the  problem  by  augmenting  the  open-loop 
equations  with  additional  states 


(14) 


Now  the  open-loop  augmented  system  (including  state  weighting)  becomes 
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which  has  the  same  form  as  equations  (27)  and  (28),  with  u  replaced  by  u^.  Assuming  the  state  weig)iting  has 
an  equal  or  greater  number  of  poles  than  xeros,  the  new  state  and  control  vectors  become 

=  ID^  0  0  0]  [Xp  7^  7.^  u  u^]^  (47) 

u^  =  [0  0  II2  ^21^  ^’'p  ^2  ”  ^*0^^ 

The  performance  index  has  the  same  form  as  equation  (31),  witli  u  replaced  by  u  .  Tlie  corresponding 
weighting  matrices  are  ° 
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The  feedback  law  wliich  minimizes  the  performance  index  is  given  by 

»  -K  X  -  K^z,  -  K.z^  -  K,  u 
o  ^  p  2  1  3  2  4 


[K.j^  K.2  >^3  >^41  =  +  n’^] 

and  the  necessary  Riccati  equation  has  the  same  form  as  equation  (35).  The  Kalman  filter  equations 
have  the  same  form  as  in  equations  (36)  -  (39).  Now  the  closed-l<’op  evaluation  model  can  be  formed, 
and  becomes 
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While  tlie  control  and  observation  spillover  cannot  be  directly  affected  by  choice  of  the  weightings,  the 
closed-loop  design  model  is  affected  and  can  be  made  less  sensitive  to  the  spillover  effects. 

The  two  forms  presented  represent  the  most  complex  versions  of  each  tlint  a  designer  would  practiiollv 
want  to  choose.  These  were  presented  because  any  less  complicated  choice  of  weights  results  in  a  very 
simple  change  in  the  overall  results.  For  example,  if  the  control  weighting  meets  the  requirements  of 

Form  1,  but  there  is  no  x  feedforward  term,  D,  ,  simply  becomes  zero.  Furtlier,  if  lliere  is  no  x 
P  II'-  p 

feedforward  term,  also  becomes  zeri  .  Going  one  step  tui'ther,  if  the  control  we-igliting  is  a  nmstanr 

matrix,  the  states  and  their  associated  termv  in  llv  penalty  matrix  are  removed,  and  is  simply  the 

chosen  constant.  Finally  if  the  state  weighting  is  ..Iso  constant,  the  z,  states  and  cor  respcind  i  ng  terms 


are  removed,  and  the  problem  reduces  completely  to  that  of  equations  (3)  -  (14).  lliis  simplification 
also  applies  to  weightings  of  Form  2.  Note,  however,  that  Form  2  does  not  simply  reduce  to  Foht^  I 
when  a  proper  control  weighting  is  used. 

4.  ANALYSIS  OF  THE  METHOD 

In  this  section,  the  effects  of  choosing  different  types  of  state  and  control  weightings  will  be 
examined.  First,  state  weighting  alone  will  be  examined,  then  control  weighting  alone,  and  then  a 
combination  of  both.  Tie-ins  to  classical  type  design  techniques  will  be  made  throughout  to  give  the 
reader  a  better  unde rs tan  ling  of  the  weightings. 

4.1  STATE  WElGlfriNG  ALONE 

The  block  diagram  for  state  weighting  is  shown  in  Figure  3.  For  the  sake  of  clarity,  the  Kalman 
filter  is  left  out.  From  this  figure  it  is  easily  seen  that 

u  =  -K^x  -  ^2^1 


(54). 

Taking  the  Laplace  transform  of  both  equations,  solving  (54)  for  z  in  terms  of  x,  and  then  substituting 
into  (53)  yields 

u  =  -[K^  +  K2(s1-Fj^)'^G^]x  (55) 

Equation  (55)  shows  the  form  of  new  feedback.  Since  Pj^(jw)  Is  chosen  to  be  diagonal,  is  always  a 

diagonal  matrix.  G  is  a  matrix  that  contains  blocks  of  zeros  and  blocks  of  diagonal  type  matrices,  so 
-1 

that  the  product  (sI-F^)  G^^  never  has  cross-coupled  terms  (i.e.,  no  terms  with  different  denominatots 

combine).  Therefore,  even  though  is  generally  dense,  there  are  still  no  cross-coupled  terms.  This 

makes  an  element-by-elemer.t  analysis  simple,  and  the  analysis  may  be  performed  in  a  single-input  single¬ 
output  setting. 

Let  us  look  at  the  problem  from  a  selection  of  weighting  viewpoint. 

Point  #1  -  If  a  mode  is  given  a  zero  weighting,  you  are  telling  it  not  to  be  regulated  at  any  f requency . 

Point  1)2  -  If  a  mode  is  given  a  constant  weighting,  you  are  telling  it  to  be  equally  regulated  at  all 

frequencies.  Including  frequencies  at  which  its  characteristics  may  not  be  well  known.  This  type  and  the 
above  both  represent  no  frequency  weighting. 

Point  #3  -  If  a  mode  is  given  a  weighting  that  has  more  poles  tlian  zeros,  it  is  a  decreasing  function 

of  frequency,  and  therefore  the  mode  will  be  "heavily"  regulated  at  low  frequencies,  and  have  decreasing 

regulation  as  frequency  increases,  to  the  point  where  it  has  no  regulation  at  all. 

Point  #4  -  If  a  mode  is  given  a  weighting  with  equal  order  numerator  and  denominator,  of  the  form 


(ju)+a^)  (Jw+a^  ) . . . 


(Jio+b^)(J(D+b2)  . . . 


then  at  low  frequency  the  weighting  has  the  value 


^^1^2  while  at  high 

bl'^2--- 


frequency  It  has  the  value  c.  Depending  on  the  a  and  b  values  this  can  represent  an  increase  or  decrease 
in  desired  regulation. 

Point  y^5  -  If  a  mode  is  given  a  weighting  with  more  zeros  than  poles,  then  the  amount  of  regulation  will 
increase  with  frequency.  Tills  can  be  arranged  in  such  a  way  tliat  the  regulation  will  tend  toward  infinity 
at  finite  frequencies  also  (notch  filter). 

In  light  of  the  above  comments,  what  type  of  feedback  do  we  get  if  we  make  some  of  these  choices? 

Type  //  1  -  No  frequency  weighting  gives  constant  gain  feedback. 

Type  //2  -  More  poles  than  zeros  In  the  weighting  gives  a  lag  or  lead  filter  in  the  feedback.  pendent 
upon  the  gains;  one  obvious  form  is  proportional  plus  integral  feedback. 

Type  //I  -  In  the  case  of  one  zero  divided  by  one  pole,  the  weighting  is  factored  into  a  constant  plus 
a  strictly  proper  transfer  function.  'l*he  zero  does  not  appear  directly  in  the  feedback,  and  the  weighting 
appe.Lrs  as  a  lag  or  lead  dependent  upon  the  gains,  while  the  constant  terms  affect  to  alter  the 
proportional  feedback. 

Type  /f*4  -  In  the  case  of  more  zeros  than  poles,  Che  zeros  do  not  appear  in  the  feedback.  The  improper 
transfer  function  Is  iaf  torod  inti’  the  .sum  ot  an  ntli  ■■'rder  poLyntimial  and  a  strictly  proper  transfer 
function.  proper  transfer  function  "appears"  in  the  feedback,  as  in  the  previous  form.  Tlie  polyn(’mial 

affects  the  Q^,  and  N  matrices  to  alter  the  constant  feedback- 

Two  items  of  interest  arise  from  this  analysis  that  may  not  be  immediately  obvious.  First,  care  must 
be  exercised  before  attempting  an  integral  control  type  weighting.  Since  the  weiglitings  are  realized  by 
augmenting  additional  states  to  the  plant,  while  the  original  system  may  have  been  fully  cont ro I  lab le ,  the 
augmented  system  may  not  be.  If  it  is  not,  then  only  poles  that  lie  in  the  open  left-half  s-plano  may  be 
added.  The  realization  eliminates  right-half  s-plane  poles,  but  a  pole  at  the  origin  can  appear. 

If  this  mode  Is  uncdn  t  ro  I  I  ab  le ,  the  system  is  unstab  i  lizable  and  thcre^’ore  does  not  have  Riccati  solution. 


•  • 


•  '• 
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Hie  5iecond  item  Is  th€'  fact  tiiat  explicit  zero  selection  in  tlie  fecdb.ick  is  not  possible. 


A 1  s  o ,  a 
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pole  is  always  present  and  therelore  proportional  plus  derivative  feedback  (K^  +  K.^s)  is  not  possible. 

In  space  structures,  this  type  of  feedback  would  not  be  desirable,  so  this  is  no  major  drawback. 

4.2  CONTROL  WL ICHTING  ALONE 

The  block  diagram  for  control  weighting  alone,  again  without  a  Kalman  filter,  is  shown  in  Figure  4. 
From  this  figure  it  is  seen  that 

u  =  u  =  “(K-x  +  K-u]  (56) 

o  i  J 

Taking  the  Laplace  transform  and  rearranging  yields 

u  =  -[si  +  K^]  ^Kj^x  (57) 

Since  K^  is  computed  as  an  optimal  gain,  there  is  no  way  to  explicitly  specify  its  value,  henco  there 

is  no  way  to  specify  the  pole  location  in  equation  (57).  Notice  that  the  block  diagram  is  drawn  for  a 
special  case  of  Form  2  from  the  previous  (design)  section.  'Hiis  is  the  case  when  the  weighting  has  only 
zeros,  no  poles.  Several  points  need  to  be  made  about  choosing  control  weightings.  First,  if  a  weighting 
with  more  zeros  than  poles  is  chosen  for  one  weighting,  all  weightings  must  be  chosen  to  have  the  same 
number  of  excess  zeros.  If  not,  in  equation  (49)  will  not  have  full  rank,  which  it  must  have. 

Second,  using  a  control  weighting  with  more  poles  than  zeros  is  not  possible  unless  the  state  weighting  ha.-; 
more  zeros  than  poles.  If  tfie  state  weighting  does  not  have  more  zeros,  then  the  term  in  eon;itions 

(32a, b,c)  will  be  zero,  and  the  control  weighting  with  more  poles  will  have  ~  0.  Tlierefove,  -.11 

again  be  singular.  Third,  control  weightings  with  an  equal  number  of  poles  and  zeros  (or  constants)  may  be 
used,  but  care  must  be  exercised  when  using  these  if  all  the  controls  are  not  weighted  this  way. 

From  equation  (32),  the  matrix  is 

"  “2'S  ^58) 

If  ail  weightings  have  an  equal  order  numerator  and  denominator,  will  be  present  for  each  control  and 

will  have  full  rank  provided  the  first  term  if  present,  does  not  reduce  the  rank  of  It  may 

also  be  seen  that  if  some  weightings  do  not  have  equal  orders,  they  must  be  combined  with  appropriate  state 
weightings  in  such  a  way  that  equation  (58)  does  have  full  rank. 

Tile  next  and  final  result  in  this  subsection  is  the  most  important.  Figure  5  shows  the  block 
diagram  for  inclusion  of  a  shaping  filter  in  the  forward  path  of  a  standard  optimal  control  problem. 
Actuator  dynamics  can  be  thought  of  as  having  the  form  of  shaping  filters.  By  solving  both  of  these 
problems  using  arbitrary  macrice.s,  it  can  be  shown  chat  the  resulting  control  laws  feeding  into  the  plant 
(and  therefore  the  resulting  closed-loop  systems)  are  identical  if  the  individual  control  weightings 
are  chosen  at  the  reciprocals  of  the  individual  shaping  filter  transfer  functions.  Tliat  is,  if  it  is 
desired  to  shape  a  control  with  a  transfer  function  of  the  form 


then  choosing  a  weighting  of  the  form 

P2UW)  -  1  (jw+b)  (60) 

a 

yields  an  Identical  result.  Tlierefore,  if  a  designer  knows  the  form  of  a  shaping  filter  (le  wishes  to 
use,  he  knows  the  type  of  control  weighting  to  yield  tlie  same  result. 

.  3  STATE  Alvil)  CONTROL  WEIGtlTlNG 

Figure  6  shows  the  block  diagram  for  this  case,  with  the  Kalman  filter  included.  Tlie  corresponding 
state  and  control  portions  are  outlined  for  clarity.  Tlie  only  effect  that  the  Kalman  filter  inclusion 
has  upon  the  previo\i.s  results  is  that  the  state  weightings  actually  shape  the  state  estimates,  but  the 
estimates  hopefully  resemble  the  original  states  (the  point  behind  the  filter),  and  the  true  stales  are 
assumed  to  be  unavailable  anyway.  The  results  of  the  previous  two  subsections  both  apply  in  this  case. 

5  CONTROL  DESIGN  EKAMPLES 

5.1  EXAMPLE  1 


^\n  extremely  simple,  non-physical  system  will  be  used  to  illustrate  tiie  tise  of  the  mctlunl.  This 
example  is  not  meant  to  be  representative  of  any  physical  structure  --  ratlier  ii  will  slc’-w  liu*  basic  use 
of  the  method.  lliis  example  is  not  meant  to  be  representative  t>f  any  physical  structure  --  ratlior  it  will 
show  the  basic  use  of  the  metliod  on  a  model  that  has  the  general  cliaracte  rl  s  t  i  cs  of  a  f  Icxihlc  space 
structure.  Tlie  open-loop  evaluation  model,  partitioned  into  its  controlled  and  suppressed  ci.ites,  is 
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(62) 


First  note  that  the  state  distribution  matrix  (A)  is  block  diagonal,  which  is  a  typical  form  for  a  finite- 
element  modeled  space  structure.  This  model  contains  two  modes:  a  lower-frequency  mode  with  damping  ratio 
;  =  0.005  and  natural  frequency  =  1.0,  and  a  higher-frequency  mode  with  =  0.005  and  =  5.0. 

This  frequency  separation  will  be  assumed  to  be  sufficient  to  justify  dividing  the  overall  state  vector 
into  controlled  and  suppressed  state  vectors.  The  controlled  states  make  up  the  design  model. 


The  design  model  is  given  by  the  following  state  and  output  equations: 


0 
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ip 
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'‘2p 
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(6  3) 


[0  i]  1: 


IP 


(ft4) 


Since  there  are  2  states  and  one  input,  five  penalty  function  elements  (four  in  the  two-by-two  matrix 
and  one  in  the  scalar  R^)  must  '  chosen,  In  this  example,  four  different  combinations  of  tliese  ciiosen 
elements  were  examined.  In  .ae  cases,  tlie  state  weighting  matrix  was  assumed  to  be  diagonal 

(for  standard  optimal  control,  this  causes  no  loss  of  generality  (10]  -  it  is  assumed  this  applies  to 
frequency  weighting  as  well).  Also,  the  first  element  in  the  state  weighting  matrix,  which  would 
represent  a  weight  on  the  displacement  of  the  mode,  was  cliosen  to  be  zero  in  all  cases.  Tlierefore,  only 
two  weights  had  t<^  be  chosen.  Tlie  four  cases  were  as  follows: 


1)  Standard  Li)G  -  state  and  control  weightings  constant  at  all  frequencies. 

2)  State  Weighting  -  state  weighting  was  made  a  function  of  frequency  with  control  weighting  constant. 

3)  Control  Weighting  -  control  weigliting  was  made  a  function  of  frequency  with  state  weighting  constant 

4)  State  &  Control  Weighting  -  both  state  and  control  weight  ives  were  made  functions  of  frequency. 


In  cases  2  and  4,  all  of  the  stare  frequency  weiglitings  chosen  had  the  form 

0  0 

I 

_c*l 

and  in  Cast?s  J  .’nd  4  all.  >’f  the  ct»nLr<>i  frequency  weiglitings  had  the  f<n'Ta 


(6  5) 


=  c''(  -f  d-') 


(b()  > 


was  diosen  as  a  decreasing  function  of  frequenev  since  the  m.'de  1  is  not  well  kiiown  at  high  f  ii*q  uen .  v 

and  theierore  sm.ill  penalties  on  st.ite  deviations  at  high  frequenev  are  desirable.  Sinoe  the  supiiressed 
modes  are  not  .iccountcd  for  in  tlie  design  mock*],  the  designer  does  mei  have  anv  int  luonce  ov'er  how  liigh- 
frequency  control  energy  will  affect  tlu’sc?  motlccs.  Since  they  are  very  close  to  the  i  mag  i  n.n'v  .ixis  (-O.Od’-' 

+  5j,  in  this  example),  anv  contri  |  energv  that  causes  even  a  small  shift  tc*  the  riglit  itt  (lu’se  pi'les  mav 
result  in  an  unstable  svstem.  fh^-refore,  the  control  weighling,  Rj(iw),  was  chosen  to  be  an  incrensing 

function  of  frequency  (where  there  are  suppressed  modes)  will  be  heavily  penalizedi. 

The  spectral  f  actori  zat  ions  of  and  Kj(j-)  are  almost  trivial  in  these  .  It  mac  oasil 

verified  that 


:i-u) 


llxe  basic  lonn  of  Che  lour  c.jsos  is  siu'wa  iii  the-  i  irsr  ri'W  >•!  I'-ih  K-  I.  Ih-.-  !v  ;  >  :  r-.  > 

positive  values  for  a,  b,  c,  aiul  d.  .^enoralitv,  those  are  !olt  as  vari  m  [',u’  • 

The  control  frequency  weightings  are  .>f  Fonn  s«‘  that  do vo  1  t  must  h.-  id!  -uv-d  :  a-  e,., 

Itie  next  step,  once  )  ar.d  are  choson  and  la^t-Tod,  is  to  J.- 1  (  r:-;  i  n,-  laoii/ot; 

P^(Ja;)  and  P,^(.ic:).  Tlie  next  row  in  fable  I  shows  liieso  results.  For  c.ises  1  jud  1  v'lor-  r;i. 

state  fre<juency  weighting,  no  ?  states  are  requirod,  <ind  thoia'foro  tiu-ro  aio  no  F  ,  h  ,  .  i  ; 

I  I 

[from  equations  (2  1)  and  (22)]  and  is  found  fr.jns 


A  similar  argLimenC  can  be  made  tor  the  ia)ncrol  weightings.  Since  none  ot  tive  woig’utmg.  inlai-., 
no  (J  ^ ,  or  matrices  are  needed  as  tliere  .ire  no  states.  For  Cases  !  aiui  2,  h  ^  i:.  si:’'pi. 

square  root  ot  R^,  In  Cases  3  and  t,  both  a  D.,  and  a  0.,^  matrix  (scalars  in  fiiis  cise)  aio  i.  o,; 
handle  tlie  weighting's  zero. 

The  next  row  in  Table  1  siiows  the  resulting  1^^,  and  N'  matrices  (Cases  i  and  2  ,lo  o.ot  ;  ..t 

N  matrix).  These  .are  found  from  equation  (31)  [C.ases  I  and  .’ )  or  (*9)  ((dist/s  ami  «!,  alter  ta.-;’ 
Che  rows  and  columns  corresponding  to  vectors  that  are  not  used  in  the  rea  U  za  t  i  «'ns .  Ti-.e  :  ourth 
shows  the  corresponding  and  matrices  from  equation  (27),  which  are  useil  in  lire  app  ri’p  r  i  1 1  e 
equation  to  solve  lor  the  feedb.ick  gains.  Tlie  form  and  dimension  id  these  feedback  gains  are  als 

The  inaL  row  shows  the  cU>sed-loop  design  A  matrix,  Aj^,  and  its  correspoiid.iug  c  1  .'Sed- 1  o, ci  c 

matrix.  A,..  lliese  matrices  are  formed  from  reductions  in  equation  (40)  or  (52),  denending.  ui^on  t 
E 

of  the  weightings. 


The  variables  a,  b,  c,  and  d  were  tuned  to  define  weightings  tiiai  produced  acceptable  c  1  osed- 1  eo;') 
eigenvalues.  Only  the  closed-loop  eigenvalues  were  examined  for  tliis  model.  here  two  criteria  were 
examined  to  determine  acceptable  results  —  a  closeii-loop  controlled  damping  ratio  near  0.'-’;  and  a  stable 
suppressed  mode.  KosuLts  for  e.'icii  case  are  sliown  in  T.ib  le  2.  iliose  are  not  meant  to  he  the  ahsohitv’  best 
cIioLce  L’f  the  weights;  rather,  they  are  representative  of  the  typo  <>f  .udiievable  results.  For  all  iMscs, 
the  strengths  t)t  tlie  noises  w  and  v  were  ciiosen  to  l)e  =  O.Ol  and  R.,  =  0.001.  This  was  a  completelv 
.irbitrary  selection. 

Case  1,  st.mdard  LQC,  gave  a  good  design  damping  ratio,  but  yielded  an  unstable  suppressed  mod'. 

State  t  req  uency-we  igli  t  Lng  .ilone  ((Ti.se  2)  yielded  the  same  r<'siilt.  Case  3,  liowever,  gave  ..  stabU'  evaluati* 
model.  Unfortunately,  the  design  d. imping  ratio  could  not  i)e  made  .is  high  as  0.7.  The  !inal  case,  with 
bi’tli  state  and  control  freciueney  welglicings,  gave  tne  desired  d. imping  ratio  atul  a  stable  suppressed  mode. 

It  is  also  interesting  to  note  that  the  suppressed  damping  ratio  was  improv'cd  by  ,i  tav-tor  of  i^vcr  three 
from  its  open-loop  value.  Ti.  s  is  not  a  goal  1u‘re  -  it  is  desired  only  tv'  keep  tlie  svste.m  from  heroning 
unstable.  Otlier  metliods  W(nild  tlien  be  used  to  improve  tlie  suppressed  'damping  ratio,  sucli  is  1  ('W 
iiuthority  control  (  5  ]. 


•'  '  • 


3.2  K.WtPl.K  2 


Nuw  a  silLghLly  lar^.T  sys  tern  w  i  1 1  be  used  to  illistr.ile  app  I  i  e.it  i  o;,  t!io  Th 

again  iias  the  tinsic  t  i  ni  le-e  lement  .stnu'tufe  eli.i  rat:  t  e  r  i  s  t  re  r»t  .i  1  irge  apa.x-  :U  ;  .<t  aio  ,  >’,iv 


The  svsten 
■, ive:i  iiv 


x  +  u  + 


y  =  I  0  C  1  X  F  V' 

where,  for  tliis  ex.imple,  i  i  a:;  •  traini  I’lie  (' ]  ,  i,.  t '’ur  ( ’• )  .  and  flu* 
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By  a  completely  arbitrary  selection,  the  three  lowest  frequency  modes  were  retained  In  the  control 
design  model  and  the  highest  frequency  mode  was  suppressed.  The  design  objective  for  this  example  was  to 
yield  a  control  law  for  which  the  closed-loop  evaluation  model  had  all  primary  modes  with  a  damping  ratio 
close  to  0.2,  and  also  had  a  stable  suppressed  mode.  First,  standard  LQG  design  was  used.  For  a  choice  of 

-  diag{0,0,0,10,10,10)  ,  "  diag{0.01,  1.0),  and  with  the  process  and  measurement  noises  all 

having  strengths  equal  to  those  in  the  previous  example,  the  basic  results  are  seen  in  Table  3,  under  the 
LQG  design  heading.  Note  that  the  highest  frequency  mode  In  the  design  model  has  been  moved  to  the  real 
axis  and  spilt  apart.  The  most  Important  fact  Is  that  the  suppressed  pole  has  gone  unstable. 


Next,  several  choices  of  state  and  control  weightings  were  made.  Tlie  final  choice  was 
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{diag  0.0,0, 

joa+4. 


30  2  5 

Ju+3,  Ju+2 


(76) 


and  =  diag  (0.2  iu+2) ,  0.2(j(ij+2 . 1) ) .  The  new  1)^,  and  N  matrices  for  this  choice  along  with  the 

basic  results  are  t,lven  In  the  second  section  of  Table  3.  It  Is  clearly  seen  here  that  all  design  poles 
have  a  damping  ratio  close  to  0.2,  and  that  the  suppressed  pole  Is  stable  (once  again,  with  a  higher  damping 
ratio  chan  open-loop).  The  gains  for  this  case  and  for  optimal  control  alone  are  on  the  same  order  of  mag¬ 
nitude,  with  the  maximum  Individual  gains  being  on  the  order  of  90  for  optimal  control  and  70  for  the 
frequency-weighted  case.  The  additional  poles  due  to  the  frequency  weightings  usually  do  not  affect 
the  closed-loop  response  as  there  are  zeros  very  close  to  their  locations.  The  overall  performance  of  the 
system  Is  discussed  at  length  In  Sections  6  and  7. 


The  rationale  behind  choosing  the  weightings  was  as  follows.  The  lowest  frequency  mode  is  separated 
enough  from  the  suppressed  frequency  so  that  the  need  for  low  frequency  roll-off  is  not  overwhelmingly 
critical,  therefore  a  break  frequency  (pole)  was  chosen  to  be  2  radians  per  second.  The  Intermediate 
design  mode  was  given  a  pole  in  between  these,  at  3  radians  per  second.  The  zeros  of  the  control 
weighting  were  chosen  to  be  2.0  and  2.1  radians  per  second  to  Insure  sufficient  control  roll-off. 

The  numerators  of  all  weightings  were  then  tuned  to  achieve  the  desired  results. 


6.  ROBUSTNESS  EVALUATION 


The  uncertainty  in  the  system  modelling  arises  from  several  sources;  (1)  Parameter  errors  -  these 
are  present  due  to  the  Imprecise  knowledge  of  modes  and  mode  shapes  of  the  structure.  (2)  Model  truncation 
errors  -  these  are  due  to  the  unmodelled  dynamics  of  the  structure.  (3)  Nonlinearities  -  these  may  arise 
due  to,  for  example,  large  angular  rates  of  motion  of  the  structure.  (4)  Disturbances  -  due  to  rotating 
machines,  combustion  devices,  rotating  antennas  and  other  on-board  equipment.  In  addition,  gravity  gradients 
and  solar  pressure  are  external  disturbance  sources.  (5)  Parameter  errors  and  model  truncation  errors  In 
the  actuator/sensor  dynamics.  (6)  Finally,  the  noise  In  the  sensors  and  actuators  may  also  contribute 
to  the  uncertainty  In  the  system  modelling.  While  it  is  Important  to  design  a  control  system  such  that 
It  is  robust  in  the  presence  of  all  these  uncertainties,  the  only  uncertainty  that  was  studied  In  this  paper 
was  that  due  to  the  unmodelled  dynamics.  The  objective  of  the  rest  of  this  paper  Is  to  evaluate  the 
robustness  of  a  reduced  order  control  design  method  (in  the  presence  of  unmodelled  dynamics)  using  singular 
value  analysis. 

There  are  numerous  publications  contributing  to  the  theory  of  robustness  of  multivariable  feedback 
systems  [for  example,  references  11  and  12).  One  can  think  of  the  actual  structure  as  being  a  combination 
of  the  design  model  of  the  structure  and  uncertainty  In  the  model.  The  purpose  here  is  to  evaluate  the 
stability  robustness  and  performance  robustness  (In  the  presence  of  the  uncertainty)  of  the  control  system 
design  using  the  method  discussed  In  the  previous  section.  The  residual  dynamics  of  the  structure  are 
modelled  as  the  plant  uncertainty  In  this  paper.  Hence  a  stability  robustness  test  is  required  for 
evaluation. 

Consider  a  multi-input  multi-output  control  system  as  shown  in  figure  7.  G(s)  is  a  precompensator 
transfer  matrix,  H(8)  is  a  feedback  controller  transfer  matrix,  P(s)  is  the  plant  transfer  matrix  and 
A(8)  is  an  uncertainty  matrix.  Assume  dimensions  of  G{s) ,  Hfs),  P(s)  and  A(s)  to  be  (fxm),  (mxd) ,  (dxl) 
and  (dxt)  respectively.  Note  that  the  uncertainty  Is  Included  in  Figure  7  as  an  additive  perturbation. 

We  can  write  the  closed-loop  transfer  matrix  T.M.,  in  three  different  forms: 

T*M-  -  (P+A)  G  [I+H(P+A)  G]"^  (77) 

-  (P+A)  [I+GH(P+A)]"^G  (78) 

-  [1+  (P+A)  GH]"*^  (P+A)G  (79) 

From  the  transfer  matrices  In  equations  (77)  -  (79),  after  making  assumptions  about  the  invertiblllty  of 
the  matrices  involved,  we  can  derive  several  stability  robustness  tests  as 

a(HAG)  <  o[I  +  HPG]  (80) 
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0  (HA) 

< 

o[G“^  +  HP] 

(81) 

a(AG) 

< 

o[h"^  +  PG] 

(82) 

a  (A) 

< 

o[(GH)'^  +  P] 

(83) 

p (GHA) 

< 

o[l  +  GHP] 

(84) 

o(AGH) 

< 

£[I  +  PGH] 

(85) 

where  a  [•]  and  (•]  are  the  maximum  and  minimum  singular  value  functions  obtained  by  the  singular  value 
decomposition  of  the  transfer  matrices  in  the  parenthesis.  Equations  (80)  -  (85)  are  all  sufficient 
conditions  for  stability  robustness  of  the  closed-loop  system  when  the  residual  dynamics  are  modelled 
as  an  additive  perturbation. 

In  reference  [4]  Kosut  derived  a  stability  robustness  test  treating  the  residual  dynamics  as  an  Input 
multiplicative  perturbation  to  the  plant.  The  residual  dynamics  of  the  plant  can  be  treated  as  an  output 
multiplicative  perturbation  as  well.  So,  a  different  set  of  robustness  tests  can  be  derived  treating  the 
residual  dynamics  as  either  input  multiplicative  perturbation  or  output  multiplicative  perturbation. 

The  stability  robustness  tests  shown  in  equations  (80)  -  (85)  have  been  obtained  using  Doyle's  formulation 
(reference  11).  In  a  similar  fashion,  a  whole  new  set  of  robustness  tests  can  be  derived  using  Lehtomaki 's 
formulation  (reference  12).  The  point  is  that  all  these  robustness  tests  are  sufficient  conditions  for 
robustness  of  the  same  system  with  the  same  uncertainty,  the  residual  dynamics.  One  may  ask  the  question  - 
are  these  robustness  tests  equivalent?  If  the  design  fails  one  robustness  test,  will  it  fall  the  other? 

To  demonstrate  under  what  conditions  one  test  implies  another  let  us  consider,  for  example,  equations 
(83)  and  (85). 

Let  us  suppose  equation  (85)  holds.  Then, 

a(dGH)  <  a[I+PGH]  =■  of  [ (GH)"^  +  P]  GH}  (86) 

Using  the  inequality  (C*l)  from  Appendix  C,  equation  (86)  implies 

0(a)  o  (GH)  <  a[(GH)"^  +  P]  a(GH)  (87) 

or  _ 

o  (GH) 

0(a)  <0  [(GH)  +  P]  -  (88) 

o  (CM) 

Now  let  us  suppose  equation  (83)  holds.  Then 

a[aGH(GH)"^]  <0  [(I  +  PGH)(GH)"^1  (89) 


■  ■■  •  .V.'. 


-A 


•  fc  •  «  '  «  •  * 

'j-  ■. 


Again  using  the  inequality  (C*l)  from  Appendix  C,  equation  (89)  implies, 

p  (GH) 

o(aGH)  ^  o  (I+PGH)  (90) 

o  (GH) 

Thus  from  equations  (88)  and  (90)  we  notice  that  a  sufficient  condition  for  equations  (83)  and  (85)  to  be 
equivalent  is  that 

o  (GH)  -  1  (91) 

o  (GH) 

Equation  (91)  holds  if  GH  is  a  unitary  matrix,  which  is  generally  not  true  for  practical  systems. 

In  other  words,  for  practical  systems  we  can  be  certain  that  the  stability  robustness  tests  given  in 
equations  (83)  and  (85)  are  not  equivalent.  In  a  similar  fashion,  one  can  derive  sufficient  conditions 
for  the  other  tests  ’iven  in  equations  (80)  -  (85)  to  be  equivalent  and  show  that  these  tests  do  not 
imply  each  other  for  practical  systems. 

Since  all  the  robustness  tests  are  not  equivalent,  and  since  there  is  no  way  to  tell  which  test  is 
the  best  one  for  the  uncertainty  in  question,  we  will  only  use  the  test  from  equation  (80)  after  substituting 
Hp,  H^,  and  H^  in  the  place  of  P,  A  and  H  respectively.  H^  and  H^  indicate  primary  and  residual  transfer 

matrices  of  the  structure.  H^  is  the  controller  transfer  matrix  to  be  designed  using  the  method  discussed 
in  the  previous  section.  We  also  assume  that  the  pre-compensator  G(8)  is  not  present.  Then  we  have 

J(H^Hj.)  <  o  [I  +  H^Hp]  (92) 

or 

a [I  +  H^Hp] 

-  >  1 

J(H^Hj.)  (9  3) 

where,  from  equations  (1)  and  (2)  Hp  and  H^  are  given  by 
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[SI-A  ]  B„  (9 

P  P  P  P 

H  (s)  -  C  [SI-A  B  (9 

r  r  ^  r  ^ 

The  form  of  H  depends  on  the  selection  of  the  frequency  shaped  quadratic  weights  in  equation  (15)  and 
c 

It  is  given  by 

H  (s)  -  S(s)  (sI-A  -B  6(s)+MC  )“^M  (9 

c  p  p  p 


6(s)  - 

-'^1 

(97) 

or 

8(s)  - 

-[K^  + 

K2(SI-F^) 

(98) 

or 

8  (s)  - 

-(SI  + 

K^)-^ 

(99) 

or 

8(s)  =■ 

-[SI  + 

K^]'^  [K^  +  K2(SI-F^)"^G^] 

(100) 

Equations  (97)  -  (100)  are  for  the  cases  when  no  frequency  weighting  Is  used,  when  state  weighting  alone 
Is  used,  when  control  weighting  (with  no  poles)  alone  Is  used,  and  when  both  state  and  control  weightings 
are  used,  respectively.  Note  that  In  equations  (97)  -  (100)  the  gain  matrices  and  are  as 

defined  In  equation  (59).  It  Is  clear  that  the  choice  of  the  frequency  shaped  state  and  control  weightings 
affect  the  controller  transfer  function  H  (s),  which  In  Cum  affects  Che  robustness  test  given  In  equation 
(93). 

If  the  control  system  design  passes  the  teat  in  equation  (93)  it  only  guarantees  stability  robustness 
of  the  system.  In  the  design  process  one  likes  to  check  the  performance  of  the  closed-loop  system  as  well. 

For  good  tracking  and  (low  frequency)  disturbance  rejection  we  would  like  to  have  a(H^Hp)  high  at  low 

frequencies.  For  minimizing  the  response  to  sensor  noise,  we  would  like  o(H^Hp)  to  be  low  (attenuation) 

at  high  frequencies.  We  also  require  performance  tolerance  to  uncertainties,  which  are  the  residual 
dynamics.  If  o[H^(Hp+  A)]  where  A  “  is  obtained  in  such  a  way  that  It  will  not  deteriorate  the 

performance  as  seen  In  £0)gHp)  plot,  then  the  closed-loop  performance  is  said  to  be  robust  for  the  uncertainty 

In  question.  In  other  words.  If  the  performance  of  the  nominal  system  Is  close  to  the  performance  of  the 
perturbed  system,  then  performance  robustness  will  be  achieved.  Of  course,  the  performance  of  the  nominal 
system  must  be  acceptable  or  the  robustness  results  are  Irrelevant. 

7.  EXAMPLE  FOR  ROBUSTNESS  EVALUATION 

Let  us  consider  again  the  example  shown  In  equations  (61)  and  (62).  The  conclusions  we  draw  from  the 
discussion  of  this  example  hold.  In  general,  for  space  structures  with  larger  dimension.  Control  systems 
are  designed  using  the  method  discussed  In  Section  3.  An  elaborate  discussion  of  the  approach  for  the 
control  design  for  this  example  Is  given  In  Section  5.  In  this  section  we  will  only  concentrate  on  the 
robustness  Issues  of  the  design.  Several  control  laws  were  designed  using  frequency  shaping  on  state 
weighting  alone,  control  weighting  alone,  or  both.  In  all  these  designs,  although  the  controller  was 
designed  for  the  primary  modes,  the  closed-loop  evaluation  model  (equation  (52))  was  stable.  Thus  it  was 
decided  to  study  the  applicability  of  the  stability  robustness  tests  given  In  equation  (80)  -  (85). 

The  residual  dynamics  of  the  structure  was  modelled  as  the  uncertainty.  Because  of  the  reasons  explained 
In  Section  6,  the  test  given  in  equation  (93)  was  selected  as  a  stability  robustness  test.  It  was  seen  that 
each  and  every  control  system  design  failed  the  stability  robustness  test  (except  one,  as  mentioned  below) 
although.  In  fact,  the  control  system  with  the  evaluation  model  was  stable.  As  an  example.  Figure  8 
shows  the  test  when  a  state  weighting  of  zero  on  the  displacement  and  100/ (u^+1)  on  the  rate  of  displacement 
along  with  a  control  weighting  of  (ui^-f-A) ,  was  used. 

It  should  be  mentioned  that  the  singular  value  test  Is  only  a  sufficient  condition  meaning  that  if  the 
design  falls  the  test,  the  system  really  may  or  may  not  be  stable.  The  point  is  that  If  one  decides  to 
Iteratively  select  the  quadratic  weights  to  design  a  control  law  for  the  reduced  order  model  and  checks  the 
robustness  using  singular  value  test,  and  If  the  design  falls  the  test,  the  results  may  be  erroneous. 

Figure  9  shows  a  saaq>le  of  one  design  which  passes  this  test.  In  this  case  a  state  weighting  of  zero  on 
the  displacement  and  0.01/ (u^-fl)  on  the  race  of  displacement  only  was  used.  Although  this  design  passed 
the  stability  robustness  test.  Its  performance  (as  seen  In  figure  10)  is  quite  unacceptable.  The  performance 
Is  unacceptable  because  this  design  resulted  In  gains  so  small  chat  the  closed-loop  performance  Is  almost 
the  same  as  open-loop  performance.  Therefore,  this  case  will  not  be  considered  when  further  conclusions 
are  given  In  the  rest  of  the  paper. 

The  fact  that  the  design  failed  the  robustness  test  In  all  other  cases  can  be  explained  as  follows. 

The  stability  robustness  tests  shown  In  equations  (80)  -  (85)  assume  Chat  the  uncertainty  as  measured  by 
the  slngularvalue  is  In  the  worst  possible  direction.  Since  the  uncertainty  in  the  example  problem  was 
assused  to  be  known  and  since  Its  direction  (phase  angle,  because  It  Is  a  single  input-single  output 
problem)  was  not  In  the  worst  direction  equations  (52)  showed  that  It  was  a  stable  design  where  as  the 
design  failed  the  test  in  equation  (93),  indicating  that  the  design  may  or  may  not  be  stable.  It  is  our 
opinion  that  the  singular  value  robustness  tests  as  shown  In  equations  (80)  -  (85)  may  be  hard  to  use  on 
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some  systems  (such  as  the  one  shown  in  equations  (61)  and  (62))  I rom  the  applications  point  of  view. 

If  Information  about  the  direction  and  or  structure  of  the  uncertainty  is  somehow,  included,  then  these 
tests  may  be  less  conservative  and  they  could  be  useful  in  a  design  process. 

However,  a  plot  of  the  minimum  singular  value  of  the  loop-gain  transfer  matrix  is  quite  useful  since 
it  gives  us  a  very  quick  estimate  of  the  lower  bound  of  the  closed-loop  performance.  Numerical  simulation 
of  a  very  large  set  of  differential  equations  that  represent  the  closed-loop  evaluation  model  (equation  (52)) 
is  a  computational  burden  and  does  not  have  to  be  carried  out  for  every  quadratic  weight  selection  -  rather 
it  can  be  carried  out  only  when  the  (loop  gain  transfer  matrix)  is  satisfactory.  For  multi-input 
multi-output  systems  (which  large  space  structures  always  are),  the  closed-loop  system  will  have  several 
bandwidths  -  one  for  each  loop.  The  cross-over  frequencies  of  the  minimum  and  maximum  singular  value 
plots  of  the  loop  gain  will  give  an  estimate  of  the  range  of  all  the  bandwidths. 


Although  every  control  system  designed  for  the  example  in  equations  (61)  and  (62)  failed  the  robustness 
test,  since  we  know  several  of  those  designs  yielded  stable  evaluation  models,  performance  of  those  designs 
was  studied.  Performance  plots  of  the  nominal  and  perturbed  (with  the  uncertainty  included)  closed-loop 
systems  are  almost  the  same  and  have  the  same  characteristics  in  all  the  designs.  These  plots  typically 
look  like  the  ones  shown  in  figures  11  and  12  and  correspond  to  the  weighting  selection  made  to  obtain 
figure  8.  Typically,  all  the  0.^^^^)  plots  show  a  very  small  value  (=*1)  at  low  frequencies  {=•  02  rad/sec), 

indicating  poor  tracking  and  disturbance  rejection  properties.  From  figures  11  and  12  it  can  be  easily  seen 
that  the  roll-off  frequency  is  very  high  (  =*30  rad/sec)  indicating  a  very  poor  performance  at  high 
frequencies.  A  careful  examination  as  discussed  below  indicates  the  reasons  for  poor  performance  and 
suggests  remedies  for  Improving  it. 

When  the  model  of  the  structure  Is  represented  as  shovm  in  equations  (3)  and  (4),  the  plant  transfer 
matrix  Hp(a)  is  as  shown  in  equation  (D*6)  of  Appendix  D  (Notice  that  the  rigid  body  modes  are  ignored). 

Let  H  (s)  be  represented  by 


where  ^(s)  is  a  polynomial  and  is  the  least  common  multiple  of  the  denominators  of  the  individual  elements 
of  H  (s)  and  ?}(s)  is  an  m  x  1  matrix.  From  equations  (D*6)  and  (101)  the  loop-gain  transfer  matrix 
is  gfven  by 


d(a)  ^l(s) 


5((8)  N(s) 


I 


IC  Is  the  free  s  In  the  numerator  of  equation  (102)  that  gives  unacceptable  performance  at  low  frequencies. 
For  good  performance  we  need  the  denominator  polynomial  ^(s)  d(s)  to  have  a  free  "s"  to  cancel  the  one  in 
the  numerator.  Since  d(s)  can  never  have  a  free  "s"  (see  equations  (D*5)  and  (D*7)),  cl(s)  must  have  a 
free  "s".  In  other  words,  the  controller  transfer  function  matrix  (equation  (101))  must  have  a  free  "s" 

In  the  denominator.  That  is,  we  need  to  use  Integral  control.  Therefore,  for  large  structures  that  are 
represented  by  the  state  equations  as  shown  in  equation  (3),  regardless  of  what  method  we  use  to  design 
a  control  system  It  is  apparent  that  we  always  need  to  use  integral  control  to  obtain  good  performance  of 
the  closed-loop  system  at  low  frequencies  as  long  as  the  measurement  vector  (equation  (4))  contains 
only  rates.  In  other  words,  if  the  displacements  are  measured  Instead  of  or  along  with  the  rates, 
integral  control  Is  not  needed.  This  can  be  easily  seen  by  rewriting  equation  (D"2)  to  measure  displace¬ 
ments  and  rederivlng  equation  (D*6).  Figures  13  and  14  show  the  stability  test  and  performance  plot 
for  an  example  with  the  state  equations  of  equation  (61)  and  an  output  equation  as  follows 
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A  state  weighting  of  zero  on  the  displacement  and  49/u^+4  on  the  rate  of  displacement,  along  with  a  control 
weighting  of  [u^+1],  was  used.  Figure  13  shows  that  the  design  failed  the  stability  test,  as  expected. 

It  can  be  seen,  however,  chat  good  performance  at  low  frequencies  can  be  obtained  using  displacements 
as  measurements . 

Since  in  practice,  though,  we  prefer  to  measure  rates  Instead  of  displacements,  let  us  now  investigate 
if  we  can  design  Integral  control  using  frequency  shaped  cost  functional  methodology  for  a  finite  element 
model  of  a  flexible  structure  with  rates  as  measurements.  From  equations  (96)  and  (99),  it  can  be  seen 
Chat  It  Is  difficult  to  use  control  weighting  alone  to  obtain  integral  control.  From  equations  (96) 
and  (98)  it  seems  easy  to  use  state  weighting  alone  to  obtain  integral  control.  To  make  the  point,  all 
we  need  to  consider  Is  Che  simplest  example  with  one  mode  and  one  Input.  Then  the  matrices  A  and  B 

P  P 

In  equation  (3)  are 


To  obtain  integral  control,  let  us  choose  the  state  weighting  as 
Q(J(i>)  •  a/u^ 

How  the  augmented  matrices  A^  and  in  equation  (27)  are 
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Vfe  Dust  check  the  controllability  of  the  augmented  system.  Defining  a  matrix  as 


B  ] 


(106) 


(107) 


it  can  easily  be  checked  that  the  determinant  of  M  equals  zero  when  the  matrices  A 

c 


equation  (106)  and  hence  M  is  rank  deficient. 


and  B  taken  from 

Therefore,  the  augmented  system  is  uncontrollable.  Since  we 


augmented  a  pole  at  the  origin  and  since  it  is  uncontrollable,  the  system  is  also  unstab  ill  table. 

This  argument  can  easily  be  extended  to  a  structure  of  larger  dimension  with  multiple-inputs  and  multiple- 
outputs.  Therefore,  frequency-shaped  cost  functional  methodology  .ilone  may  not  be  used  to  design  Integral 
control  for  finite  element  models  of  flexible  structures.  It  may  be  possible  to  obtain  integral  control 
when  frequency-shaped  LQG  method  is  used  in  conjunction  with  low  authority  control  [5].  The  implications 
of  this  are  being  studied  now. 


8.  CONCLUSIONS 


Finite  element  models  of  flexib^’  structures  were  considered.  Frequency  shaped  Linear  Quadratic 
Gaussian  method  was  explained  to  des  tg.i  controllers  for  reduced  order  models.  The  most  obvious  benefit 
of  frequency-weighting  the  cost  functionals  in  the  quadratic  performance  index  is  that  it  makes  the 
evaluation  model  stable  in  closed-loop  operation,  while  with  standard  LQG  design  it  is  quite  often  unstable. 
This  result  was  clearly  seen  in  the  simple  examples.  The  major  cost  of  using  this  method  is  the  additional 
states  that  are  required  in  the  design  model.  For  academic  type  simple  systems  (such  as  the  ones  shown 
in  this  paper)  the  additional  hardware  needed  for  Implementation  is  very  simple,  and  the  increased 
computational  burden  is  minimal.  However,  for  a  realistic  space  structure,  this  addition  of  states  would 
cause  an  end  result  of  discarding  some  design  states  that  could  otherwise  be  kept.  Therefore,  a  trade-off 
occurs;  loss  of  model  information  versus  reduced  stability. 

Another  observation  that  has  been  made  concerning  this  method  is  that  the  frequency  weightings  are 
nothing  more  than  dynamic  feedback  compensators  and  shaping  filters.  By  making  a  careful  examination  of 
the  block  diagrams  resulting  from  the  additional  weighting  states  this  relationship  may  be  seen. 

Application  of  singular  value  theory  to  analyze  the  stability  and  performance  robustness  of  the 
evaluation  model  was  discussed.  For  additive  uncertainty,  several  different  stability  robustness  tests 
were  considered.  It  was  shown  that  the  sufficient  condition  for  these  tests  to  imply  each  other  is  that 
the  inverse  of  the  condition  number  of  the  loop  gain  transfer  matrix  must  be  unity,  which  cannot  be 
satisfied  for  practical  systems. 

Several  control  systems  were  designed  for  a  simple  example  and  every  useful  design  failed  the 
stability  robustness  test,  although  the  designs  were  stable.  A  suggestion  to  Improve  the  applicability 
of  the  singular  value  robustness  test  is  that  the  direction  and  or  structure  of  the  uncertainty  must 
somehow  be  accounted  for. 

The  use  of  minimum  singular  value  plot  of  the  loop-gain  transfer  matrix  was  emphasized  since  it  parallels 
the  Bode  plot  for  single  input  single  output  systems.  It  was  shown  that  integral  control  must  be  used 
to  improve  the  low-frequency  closed-loop  performance  of  the  finite  element  models  when  the  rates  of 
displacements  are  used  as  measurements.  It  was  also  shown  that  it  may  not  be  possible  to  obtain  integral 
control  by  frequency  shaped  Linear  Quadratic  Gaussian  methodology  alone  for  structures  represented  by 
finite  element  models. 
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APPENDIX  A 

Spectral  Factorization 

Most  previously  proposed  weighting  functions  have  been  simple  ratios  of  pole  and  zero  pairs, 
usually  adaptable  into  the  form  +  a^,  where  n  must  be  even.  These  are  easily  factored  as  shown. 

o  If  n/2  is  even,  =  s^ 


therefore  s  »  a  /l80*^/n  -b  360^i/n 


1  =  1.2. 


If  n/2  is  odd,  oo"  »  -s" 
-s”  +  s'*  =  0  or  s 


therefore  s  »  a  /  360  l/n 

i  =  1,2,.. .,n 

the  product  of  all  the  left-half  plane  roots  yields  the  numerator  or  denominator  of  the  elements  in  the 
matrices  Chat  must  be  realized  (P^  or  ^2^' 

APPENDIX  B 

TRANSFORMING  MODIFIED  ALGEBRAIC  RICCATI  EQUATION 
-PA  -  A^P  -  Q  +  (PB  +  N)R~^(PB  +  N)^  -  0 
-PA  -  A^P  -  q  +  (PBR”^  +  NR”^)  (B^P  +  N^)  =  0 

-PA  -  a’^P  -  Q  +  PBR'^B^P  +  PBR"H|^  +  NR’^B^P 

+  NR”^^  =  0 

-P(A  -  BR“V)  -  (A^  -  NR"^B^)P  -  (Q  -  NR"*^N^) 

+  PBR"^8^P  -  0 

This  has  the  form  of  a  standard  Rlccatl  equation,  as  shown 
-pX  -  X^P  -  +  PBR"^B^P  -  0 

where 

i  -  A  -  BR”V 

•  A^  -  NR  ^B^  provided  R  ^  Is  symmetric 

Ji  -  Q  -  NR“V 

APPENDIX  C 

Theorem:  LetAec'”*''  Bec"**'.  Then 


,  m  X  n 

BeC  "  * 

Then 

0  (AB) 

1  0  (A) 

0  (B)  < 

o(AB);  If  n  £  I 

0  (AB) 

1  i  (A) 

a  (B)  £ 

a(AB) ;  If  n  £  m 
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In  other  words,  if  B  has  more  rows  chan  columns,  (C*l)  does  not  hold.  If  A  has  more  columns  than  rows, 
(C*2)  does  not  hold. 

Proof;  From  Che  propercy  of  Che  minimum  singular  value,  we  have 


B  X 


U  >  o  (B) 


Therefore 


o(B) 


Kill 


#  X  €  C 
X  0 

AA  X  e  C* 
X  )<  0 


From  the  property  of  the  maximum  singular  value 

11^  HL  <  j( 

*  II2 


J(AB) 


Substituting  (C  *4)  In  (C  *5)  gives 
o  (B)  IIaBx 


£  O  (AB) 


|®*|l2 


AA  X  e  C 

X  »•  0 


#  X  e  C 

X  1*  0 


(C-3) 


(C.4) 


(C-5) 


(C*6) 


If  B  does  not  have  full  rank,  2^(B)  “  0  and  (C*l)  Is  trivially  satisfied.  So  we  need  only  to  consider  B 
having  rank  *  n  1. 


Thus  B  Is  a  linear  transformation 


C  on  Co 


(C*7) 


and  the  transformation  Is  many  in  one  and  on  to  c".  This  argument  does  not  hold  for  n  >  1  and  will  show 
a  counter  example  for  that.  Now  let 


Bx  -  y 

(C*6),  (C«7)  and  (C*8}  Imply  that 
a(B) 


Ay 


2  <  o(AB) 


»  y  c  C 
y  ^  0 


(C.8) 


(C-9) 


Hence 


o{AB) 


II  ^  II2 

a(B)  max  ||Ay  }|^  ^ 

y  0  II  ,  II2 

which  is  the  right  Inequality  of  (C'l). 

Now  let  us  prove  Chat 

o  (AB)  <  0(A)  o  (B) 

where 

At  C“*",  BeC"*^ 

and  with  no  restriction  on  m,  n  and  t. 

From  the  property  of  the  minimum  singular  value,  we  have 

1  <»)  <  IK  II,  ,  IMI2  ll‘HI 
ll'lk 

Therefore 

II  M  II 

“*  -  o  (A)  o  (B) 
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X  ^  0 


o(AB)  <.  II  A  jjj  min 
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Table  1.  Matrices  required  for  frequency-shaping 


Table  2.  Results  for  Example  1 


Standard  LQC 

Design 

q  -  dlag  {0,0,0.10,10,10} 

R  -  dlag  {O.Cl,  1.00) 

Kalaan 

Filter  Poles  Design  Poles 

Residual 

Poles 

C 

(ii  c 

(i) 

C 

u 

0.0863 

0.1643 

0.1151 

1-6706  0.2930 
2.9428  0.2194 
4.1387  1.0000 

1.8435 

3.6796 

0.8831; 

-0.0204  9 

11.252 

.1112 

LQC  With  State  6  Control  Weighting 

50  30  25 

Pj  -  dlag  (0,0,0, 

jart-4,  Jw.3,  JiiH-2  }  Pj  -  dlag  {0.2(Ju+2),  0, 

.2(J(tff2.1)} 

-  {0.0, 0,0, 0,0 

n# 

,1,1,1,0.16,0.1764}  Rj  -  dlag  {0.04,  0.04} 

n’'^  -  [0,0,0,0,0,0,0,0,0.0.08,0.084) 

Kalaan 

Filter  Poles 

Design  Poles  Residual  Poles 

Addl tlonal 

FoV's 

c 

u 

3 

3 

C 

b) 

0.1113 

1.4907 

0.2232  1.7443  0.0071  9.2495 

1.000 

1. 3196 

0.1617 

2.9384 

0.2944  3.  3140 

1.000 

1.8375 

1  0.1169 

4.2093 

0.2171  4,5719 

1.000 

3.457.’ 

1.000 

3.6804 

1.000 

4.  2942 

Table  3.  Results  for  Example  2 
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The  modern  aircraft  or  spacecraft  carrying  an  ever  increasing  quantity  of  sophisticated 
digital  avionics  can  no  longer  utilize  bundles  of  cables  for  interconnection  purposes. 
Instead  the  time  division  multiplexed  Data  Bus  System  (DBS)  has  become  the  accepted 
technique  for  data  transfer,  significantly  reducing  wiring  weight  and  complexity  while 
increasing  the  integrity  and  reliability  of  signal  transfer.  This  trend  is  exemplified 
in  the  B-1,  F-15,  F-16  and  Space  Shuttle  Orbiter  all  of  which  use  a  multiplexed  digital 
DBS. 

'The  result  of  current  LSI  and  future  VHSIC  component  technology  is  to  develop  avionics 
of  greater  information  throughput  capability  operating  at  higher  frequencies  yet 
achieving  tenfold  packaging  densities.  The  aircraft  or  spacecraft  designer  faced  with 
demands  to  add  more  mission  and/or  furctional  capability  capitalizes  on  the  above 
mentioned  trend  by  adding  more  avionics  to  the  vehicle  thereby  increasing  the  demand  on 
the  DBS  to  provide  a  high  integrity  interconnect  with  no  degradation  to  the  intrinsic 
avionic  capability.  The  Space  Shuttle  Orbiter  having  5  10  Processors  (computers)  and 
over  400  elements  of  avionics  dedicated  to  interfacing  via  24  interconnecting  data 
buses  is  an  example  of  this  trend. 

This  paper  describes  a  suggested  sequence  to  be  followed  in  the  design,  development, 
analysis  and  simulation  of  a  digital  DBS.  It  discusses  the  computer 

modeling/simulations  performed  and  the  hardware  verification  test  results  obtained  on 
elements  of  the  Space  Shuttle  Orbiter  data  bus.  It  also  describes  a  number  of  specific 
modules  developed  for  the  Space  Shuttle.  concludes  with  a  discussion  of 

MIL-STD-1553  Remote  Terminal  Bus  Controllers  (RT/^)  in  operational  use  by  the  U.S.A.F. 

niTr»»rTnM\ 


1.  INTRODUCTION  ^ 

The  designer  of  Guidance  and  Control  systems  for  large  space  vehicles  will  no  doubt  use 
multiplexing  technology  for  digital  data  communication  between  the  elements  of  the 
system. 

Multiplexing  the  digital  bus  provides  many  advantages:  (See  Figure  1) 

Minimum  weight 

Fail-safe  redundancy  and  reliability 

A  high  degree  of  Immunity  to  spacecraft  self-generated  noise  and  external  EMI 

High  data  rate  throughput 

Standardized  interface 

Ease  of  checkout  and  reconfiguration. 


In  addition,  the  'e  of  the  DBS  is  such  that  the  designer  can  analyze  and  perform 

computer  simulat  predict  system  performance  prior  to  hardware  fabrication. 

Recognizing  the  ntages,  specific  activity  to  establish  a  Multiplexed  (MUX) 

Data  Bus  System  s  ’  .^iigan  in  early  1968  when  the  Aerospace  Branch  of  the  Society 
of  Automotive  Engir  3AE)  set  up  the  Multiplexing  for  Aircraft  (SAE-A2K)  Committee 

made  up  of  members  iron  industry  and  the  Department  of  Defense.  The  output  of  their 
efforts  was  a  report  which  became  the  basis  for  USAF  MIL-STD-1553  which  was  first 
issued  in  1973.  The  Space  Shuttle,  B-1  and  F-15  MUX  developments  were  started  before 
MIL-STD-1553  and  were  carried  on  during  the  period  of  its  development  by  the  SAE-A2K 
group.  The  F-16  was  the  first  aircraft  to  have  MIL-STD-1553  requirements  applied  to 
it. 

Subsequent  revisions  to  this  military  standard  have  been  generated,  the  first, 

MIL-STD-1553A  was  Issued  in  1975  and  represented  a  common  U.S.  Air  Force  and  Navy 
position.  As  applications  of  MUX  grew,  a  number  of  difficulties  appeared  in  the  use  of 
this  specification.  A  new  task  force  was  created  by  SAE  and  using  inputs  and  comments 

rom  the  three  services,  foreign  users  and  industry,  they  issued  a  new  document, 

MIL-STD-1553B  in  late  1978.  The  essential  function  provided  by  MIL-STD-1553B  is  to 
establish  standards  for  information  transfer  formats  and  electrical  interface 
parameters. 

In  the  sections  to  follow  we  will  describe  the  design  sequence,  technical 

considerations  and  methodology  typically  employed  in  the  development,  analysis  and 
simulation  of  an  avionic  Data  Bus  System  (DBS)  . 


The  design  procedures  discussed  are  equally  applicable  to  applications  using  the  MIL 
standard  or  a  unique  MUX  system.  The  sequence  commences  with  a  discussion  of  the  role 
of  the  Data  Bus  System  designer. 


2.  SYSTEM  DESIGN 

The  considerations  which  dictate  the  design  choices  can  be  divided  into  those  dictated 
by  the  vehicle  configuration  (which  lead  to  the  data  bus  specifications)  and  those 
which  constrain  the  specific  design  of  the  data  bus  itself.  Figure  2  attempts  to  show 
this  separation  in  terms  of  the  responsibilities  of  the  Avionics  System  Designer  and 
the  Data  Bus  Designer.  The  figure  also  outlines  the  key  steps  in  the  evolution  of  a 
data  bus  design  which  will  be  discussed  in  Section  3. 

We  will  first  discuss  the  task  of  the  Avionics  System  Designer  and  the  information 
which  he  must  generate  and  provide  to  the  Data  Bus  Designer. 

Prior  to  the  existence  of  MIL-STD-1553 ,  the  system  designer  was  required  to  develop 
architectural  parameters  of  the  bus  such  as: 

o  Signal  Format 

-  Waveform 
Synch  Format 

o  Signal  Characteristics 

-  Signal  Levels 

-  Data  Rate 

-  Cable  and  Cable  Impedance 

-  Placement  and  Number  of  Stubs 

o  Word  Content  (Number  of  bits,  synch,  parity) 

-  Command  Words 
Status  Words 

-  Data  Words 

o  Hardware  Characteristics 
Impedance 

-  Function 

-  Response  Time 

The  availability  of  MIL-STD-1553  A/B,  if  deemed  acceptable  for  the  intended 
application,  significantly  simplifies  this  initial  phase  inasmuch  as  it  predetermines, 
by  standardization,  many  of  the  essential  characteristics  of  the  DBS  hardware  and 
software. 

Each  DBS  design  is  unique  because  each  vehicle  and  its  avionics  suite  is  unique  which 
still  requires  that  the  Avionics  System  Designer  specify: 

o  Number  of  Terminals  -  A  detailed  analysis  of  the  bus  traffic  anticipated,  the 
quantity  of  avionics  required  and  master/slave  relationship  of  the  terminals 
is  required.  The  degree  of  redundancy  (as  it  relates  to  the  Data  Bus  and  the 
onboard  avionics)  must  also  be  reviewed. 

o  Physical  considerations  -  The  physical  configuration  of  the  spacecraft  or 
aircraft  must  be  examined  to  establish  the  dimensional  characteristics  of  the 
Data  Bus.  The  cable  routing  must  consider: 

a.  Physical  security  -  The  cable  run  must  be  protected  against  accidental 
or  hostile  damage. 

b.  Temiperature  -  Electrical  and  redundancy  considerations  may  require 
routing  into  areas  of  severe  thermal  extremes  limiting  the  ability  to 
provide  couplers/bulkhead  connectors  capable  of  operating  in  the 
environment . 

c.  EMI  -  Cable  routing  trade-offs  must  consider  the  EMI  environment  likely 
to  be  experienced  in  various  areas  of  the  vehicles.  The  EMI  environment 
near  powerful  radar  transmitters  or  prime  electrical  power  generating 
equipment  may  likely  Impose  a  severe  electrical  problem  to  the  equipment 
designer . 

d.  Vibration  -  The  Space  Shuttle  data  bus  terminal  receiver  in  the  Solid 
Rocket  Booster  required  unique  mechanical  characteristics  to  meet  the 
vibration  environment. 

e.  Electrical  line  length  -  Together  with  the  implied  consideration  of 
bulkhead  connectors,  very  long  cable  runs  affect  the  impedance,  line 
loss  and  reliability  of  the  Data  Bus.  Additionally,  the  use  of  Data  Bus 
Isolation  Amplifiers  may  be  required  to  extend  the  bus  for  very  long 
runs  and/or  to  accommodate  dynamic  reconfiguration  of  the  system. 


J 


o 


Data  Bus  Characteristics. 


a.  Detailed  analysis  is  required  to  determine  whether  to  use  a  time 
division  command/response  multiplex  data  bus  like  MlL-STD-1553  or  a 
unique  data  bus  protocol  for  the  intended  application.  The  availability 
of  hardware  and  software  to  implement  MIL-STD-1553  leaves  little  reason 
not  to  conform  to  the  Standard,  unless  the  required  data/message  rates 
or  other  compelling  needs  cannot  be  met  by  MIL-STD-1553. 

b.  The  Word  Error  Rate  (WER)  at  specific  noise  levels,  type  of  cables, 
noise  levels  and  the  EMI  environment  must  be  defined. 

c.  The  trade-offs  of  single  or  multiple  clusters  considering  data  rate 

prioritization,  data  traffic  patterns  and  fail  safe  factors  must  be 

evaluated . 

Allowance  for  expected  growth  in  avionics  is  an  essential  consideration.  Recognizing 
the  lengthy  time  scale  for  the  development  of  a  spacecraft  or  aircraft  weapon  system 
and  the  ever  changing  developments  of  new  avionics  (i.e.,  EW,  JTIDS,  GPS)  it  would  be 
irresponsible  to  not  provide  for  planned  growth  in  the  system  design  of  a  DBS. 

Another  trade-off  that  must  be  considered  is  whether  to  have  a  single  MUX  terminal 

design  to  be  used  for  all  (or  most)  terminals.  This  imposes  the  problem  of  designing  a 

MUX  terminal  capable  of  satisfying  the  sometimes  conflicting  electrical  and  physical 
requirements  of  many  subcontractors.  A  common  MUX  terminal  does  enable  the  one  time 
development  of  dedicated  VLSI,  common  microcode  and  a  maximized  performance  that  is 
completely  characterized.  The  use  of  a  single  MUX  terminal  design  can  and  has  been 
successfully  accomplished  specifically  on  the  Space  Shuttle.  However,  schedule 

constraints,  GFE  vs.  CFE,  defining  clear  contractual  and  technical  responsibilities, 
packaging  and  power  considerations  may  preclude  this  choice. 

Based  on  these  overall  considerations,  the  Avionics  System  Designer  generates  the 
specifications  for  the  Data  Bus  Designer  who  now  must  translate  this  specification  into 
the  Data  Bus  System  (DBS)  hardware.  This  is  discussed  next. 

3.  DBS  DESIGN  APPROACH 

Having  been  given  the  System  Designer's  Specification,  the  DBS  Designer  must  still  be 
concerned  with  many  facets  of  the  DBS  system  design  which  remain  unspecified.  He  must 
be  cognizant  of  the  bus  structure,  i.e.,  single  level  or  multi-level,  of  the  network 
configuration  (star,  ring  or  string  bus  are  the  most  popular)  since  the  reliability  of 
the  bus  network  is  influenced  by  the  topology  and  the  control  configuration 

(centralized,  federated  or  decentralized)  as  an  Intertwined  entity. 

The  typical  network  configurations  are  illustrated  in  Figure  3.  Star  configurations 
are  frequently  used  where  network  control  is  located  in  a  central  node.  All  routing  of 
network  message  traffic  is  from  the  central  node  to  outlying  nodes  or  from  an  outlying 
node  to  the  central  node.  The  star  network  is  optimal  when  the  bulk  of  communication 
is  between  the  central  and  outlying  nodes.  When  data  traffic  is  high  between  the 

outlying  nodes  the  central  node  is  excessively  burdened. 

The  ring  configuration  is  arranged  to  form  an  unbroken  circular  configuration. 

Transmitted  messages  travel  from  node  to  node  around  the  ring.  Each  node  must  be 
capable  of  recognizing  its  own  address  and  in  addition  serves  as  an  active  repeater  to 
retransmit  messages  addressed  to  other  nodes.  Failure  of  a  node,  adding  a  new  node  or 
any  other  break  in  the  ring  configuration  will  often  cause  the  network  to  stop 

functioning.  It  is  possible  to  provide  for  bypass  of  failure  points  but  only  at  the 
cost  of  increased  repeater  complexity  at  each  node. 

The  string  configuration  shares  a  single  physical  channel  (bus)  via  cable  linkages  (bus 
couplers)  or  connectors.  Messages  placed  on  the  bus  are  transmitted  to  all  nodes.  All 
nodes  are  required  to  recognize  their  own  address  in  order  to  receive  transmissions. 
Since  the  nodes  are  passive,  network  operation  is  inherently  resistant  to  single  point 
node  failures. 

Bus  network  performance  is  determined  by  bus  bandwidth,  number  of  nodes  connected  to 
each  bus,  bus  access  protocol  and  by  system  timing  constraints  and  average  and  peak  bus 
user  traffic  rates.  This  analysis  is  made  significantly  simpler  for  buses  that  are  to 
be  MIL-STD-1553B  compatible.  For  these  systems  one  can  quickly  compute  the  average  bus 
loading  by  considering  the: 

message/type 
words  per  message 

overhead  associated  with  each  message  type 
overhead  associated  with  node  codes 
intermessage  gap 
average  response  time 

overhead  associated  with  non-stat ionary  master  bus  controller  passing. 

Systems  that  are  not  MIL-STD-1553B  compatible  must  first  have  established  message 
protocol,  message  and  word  constructs  and  transmission  rates  before  a  similar 
calculation  can  be  made. 
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Another  aspect  of  data  bus  mechanization  to  be  meshed  with  these  system  considerations 
is  error  management.  The  ability  of  the  DBS  to  identify,  determine  the  cause  and 
achieve  corrective  actions  of  failure  conditions,  regardless  of  whether  they  are 
problems  peculiar  to  the  data  bus  or  to  an  interconnecting  subsystem  are  also  part  of 
DBS  design  analysis.  It  is  the  system  designer's  responsibility  to  establish  the 
reponse  to  any  error  condition  that  may  be  recognized. 

To  achieve  the  proper  functional  partitioning  of  a  data  bus  system  requires  the  system 
integration  knowledge,  experience,  and  an  understanding  of  how  this  can  be  applied  to 
the  data  bus  system  architecture.  This  integration  must  be  viewed  from  an  overall 
integrated  approach  rather  than  from  a  conglomeration  of  individual  sensors,  controls 
and  displays.  Achieving  this  integration  requires  detail  interface  definitions  and 
detailed  information  flow  analysis.  Before  establishing  a  specific  topology  or  control 
method,  the  detailed  functional  flow  and  message  definition  should  be  developed.  it  is 
at  this  time  that  the  functional  partitioning  philosophy  is  utilized.  A  DBS  may  be 
partitioned  by  function  (navigation  bus,  etc.)  or  by  redundancy  requirements 
(separation  of  redundant  elements) .  Implementation  of  the  redundancy  philosophy 
provides  improved  autonomy  and  failure  protection.  However,  it  may  create  increased 
traffic  between  bus  systems  and  therefore  require  more  time  for  messages  to  pass  from 
one  bus  to  another . 

It  is  also  necessary  to  specify  the  data  bus  characteristics  with  regard  to: 

cable  type  including  specification  of  capacit  nee,  twisting,  shield  coverage 
cable  characteristic  impedance  (typically  70  o..ms  @  1  MHz) 
cable  attenuation  (typically  1  to  2  dB/100  ft) 

cable  termination  (provision  for  termination  of  the  cable  at  both  ends  with 
its  characteristic  impedance) 

cable  stub  requirements  -  either  direct  coupled  or  transformer  coupled  stubs 
are  possible.  The  maximum  stub  length  should  be  specified.  Stub  clusters 
(close  spacing  of  stubs)  should  be  avoided.  Also  the  length  of  individual 
stubs  should  be  minimized. 

impedances  induced  by  stub  linkages  and  by  the  terminal  load.  These 
impedances  are  critical  since  it  is  desirable  to  minimize  reflections  caused 
by  transmission  line  mismatch  while  simultaneously  maximizing  the  signal 
power  to  be  delivered  to  the  terminal  receiver  input. 

bandwidth  of  transformer  for  stub  linkages  to  maximize  waveform  fidelity. 

Now  that  the  designer  has  defined  a  first  cut  of  the  electrical  characterization  of  the 
DBS  and  the  hardware  elements,  he  can  proceed  to  the  task  of  analysis  and  simulation  by 
developing  models  of  each  bus  element.  Typical  models  are  discussed  below. 

o  A  DBS  -  Figure  4  illustrates  a  typical  string  network  with  transformer  type 
bus  couplers  located  at  various  nodes  along  the  bus,  with  bus  termination 
resistors  at  both  ends,  and  with  terminal  receivers  located  at  each  stub. 

o  A  transmission  line  -  Figure  5A  shows  generalized  equations  for  modeling  a 
lossy  transmission  line  with  its  distributed  parameters.  These  equations 
describe  the  incremental  voltage  and  current  propagation  along  the  line  and 
the  line  characteristic  impedance  and  propagation  constant. 

o  A  model  of  a  Data  Bus  Coupler  -  Figure  5B  shows  a  bi-directional  circuit 
which  connects  the  data  bus  to  a  stub.  The  model  consists  of  a  transformer 
model  plus  series  resistance,  Bs,  representing  the  internal  discrete 
isolation  resistors. 

o  The  Terminal  Receiver  (TR)  (transmitter  mode)  -  Figure  6A  is  an  equivalent 
circuit  of  the  terminal  receiver  when  transmitting  and  looking  back  into  the 
output  transformer.  The  active  components  in  the  circuit  model  have  been 
linearized  to  simplify  the  data  bus  simulation. 

o  The  TR  Input  Impedance  (receiver  mode)  -  Figure  6B  shows  a  terminal  receiver 
model  looking  into  the  receiver  transformer  with  capacitive  and  resistive 
loading  to  account  for  the  effects  of  the  turned-off  transmitter,  filter 
input  loading  and  clipping  network  loading. 

o  The  TR  input  filter  characteristics  -  Figure  6C  shows  a  mathematical 

representation  of  the  frequency  domain  model  which  includes  the  input 
transformer,  a  6-pole  low  pass  Bessel  filter  and  a  2-pole  high  pass  filter. 

The  ultimate  measure  of  data  bus  performance  is  its  word  error  rate  (WER)  which  is 
defined  as: 

>  Sync  Misses  t  Bit  Misses  +  Undetected  Bit  Errors 
Number  of  Words  Transmitted 

For  the  purpose  of  WER  performance  verification  a  Sync  Miss  is  defined  as  the  inability 

to  declare  a  valid  sync  (start  reception)  when  a  valid  sync  is  known  to  have  occurred. 

An  Undetected  Bit  Error  is  defined  as  an  undetectable  error  of  finite  but  very  low 

probability  which  can  occur  despite  detection  of  a  valid  sync  and  no  Bit  Miss 

indication . 


This  error  rate  is  fundamentally  dependent  upon  the  ratio  of  the  signal  energy  to  the 
noise  energy  at  the  input  to  the  terminal  receiver.  The  system  designer's  objective  is 
to  maximize  this  ratio  by  minimizing  the  signal  losses  and  the  noise  levels  over  the 
data  bus.  A  reasonable  design  strategy  is  to  define  a  design  point  (signal  level  and 
noise  threshold)  for  receiver  performance.  The  DBS  designer  must  now  adjust  his  design 
parameters  to  assure  that  a  satisfactory  margin  of  safety  exists  above  the  design 
point.  In  general,  the  designer  will; 

limit  the  cable  length,  stub  length  and  number  of  bus  couplers 
increase  the  reguired  transmission  voltage  to  its  largest  practical  level 
establish  reasonable  constraints  on  the  transmitter's  rise  and  fall  time 
assure  that  the  cable  is  terminated  with  its  characteristic  impedance. 

Using  the  lumped  parameter  models  for  bus  couplers,  the  terminal  receiver,  the  terminal 
transmitter  and  a  reasonable  value  for  line  attenuation  the  DBS  designer  must  verify 
that  the  signal  strength  satisfies  the  desired  margin  of  safety  requirement  at  each 
terminal  receiver  for  all  data  bus  configurations.  Next,  the  DBS  designer  should 
prepare  an  analysis  of  the  expected  bit  error  rate  at  the  system  design  point.  After 
determining  that  the  signal  strength  satisfies  the  design  requirements  the  concern  is 
for  waveform  fidelity.  Using  the  lumped  parameter  models  previously  developed  and  the 
distributed  parameter  model  for  the  transmission  line,  the  designer  analyzes  all  data 
bus  configurations  and  substantiates  the  adequacy  of  waveform  fidelity.  In  this 
regard,  experience  on  the  Space  Shuttle  Program  has  revealed  the  following  guidelines 
for  improved  waveform  fidelity  and  thereby  optimized  WER  performance: 

Avoid  locating  stubs  in  clusters  (less  than  1  foot  apart).  The  problem  with 
clusters  results  from  reflections  from  other  members  of  the  cluster.  These 
reflections  tend  to  distort  the  receiver  waveform. 

Avoid  wide  variation  of  stub  lengths. 

Error  rate  is  very  sensitive  to  bus  complexity  (i.e.,  the  more  complex  the 
more  distortion) . 


At  this  point,  the  designer  has  verified  performance  and  has  a  final  electrical 
characterization  of  the  DBS  system  and  its  hardware  elements.  Specifications  for  the 
hardware  development  can  now  be  released  to  the  MUX  hardware  designer  who  will  use 
these  DBS  parameters  for  selecting  the  detector  algorithm  and  threshold  to  achieve  the 
WER. 


After  the  hardware  design  details  have  been  established  the  DBS  designer  can  perform 
the  analysis  and  verification  of  the  DBS  performance.  This  is  discussed  'n  the  next 
section . 

4.  ANALYSIS  AND  SIMULATION 

DBS  performance  (allowable  WER)  in  response  to  nominal  and  worst  case  conditions  of 
signal  amplitude,  rise  time  and  fall  time,  bandwidth  ambient  noise  are  now  to  be 
analyzed  and  simulated.  To  accomplish  this  it  is  necessary  to  create  a  more  complete 
computer  model. 
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In  addition,  it  is  necessary  to  have  knowledge  of  the  terminal  receiver  threshold 
detection  circuitry,  filter  characteristics  and  detection  algorithms  discussed  earlier. 

To  establish  confidence  in  the  computer  simulations  it  is  desirable  to  build  an  actual 
breadboard  model  which  can  represent  an  anticipated  worst  case  bus  configuration.  This 
model  will  enable,  by  test  and  measurement,  the  verification  of  computed  waveform 
fidelity  at  selected  terminal  receiver  locations  and  system  WER  performance. 

A  block  diagram  of  a  DBS  Test  Configuration  is  illustrated  in  Figure  7.  Similar  test 
configurations  were  built  on  the  Space  Shuttle  program  and  proved  to  be  vital  to  final 
refinement  of  the  computer  simulations,  to  establishing  confidence  in  these  simulations 
and  also  for  WER  screening  of  all  production  hardware.  The  Data  Bus  Controller 
simulates  actual  bus  transmissions  and  allows  for  the  variability  of  transmission 
parameters  such  as  signal  amplitude  and  signal  rise  and  fall  time.  Additionally,  it 
provides  a  compatible  interface  for  the  Host  avionics  side  of  the  terminal  receiver 
(MIA)*  to  enable  the  extraction  of  the  received  data  and  the  subsequent  comparison  with 
the  transmitted  data.  The  transmitted  data  is  routed  to  selected  stubs  in  the  bus 
configuration  that  is  being  modeled.  The  signal  at  a  selected  stub  location  is  mixed 
with  band  limited  Gaussian  white  noise  in  the  mixer  and  the  combined  signal  goes  to  the 
terminal  received  (MIA) .  By  judicious  control  of  signal  characteristics  and  RMS  noise 
levels  parametric  studies  of  WER  were  performed. 

Figures  8A,  8B  and  8C  illustrate  the  close  correspondence  actually  obtained  between  the 
terminal  receiver  waveforms  generated  by  computer  simulation  and  by  measurement  (inset 
on  each  figure)  for  several  bus  configuration  and  stub  locations. 

Once  confidence  has  been  established  in  the  computer  simulations  via  hardware 
verfication,  it  is  reasonable  to  perform  additional  computer  and/or  hardware  studies  of 
the  effects  of  parametric  variations  of  signal  amplitude,  system  noise,  terminal 
receiver  bandwidth,  terminal  receiver  thresholds  and  signal  rise  time  on  Word  Error 

Rate  (WER) . 

*  Terminal  Receiver  nomenclature  for  Space  Shuttle 
Applications  is  "Mutiplex  Interface  Adapter"  (MIA) . 


This  was  done  on  the  Space  Shuttle  program  and  Figure  9  illustrates  the  anticipated 
performance  for  representative  conditions.  For  each  threshold  voltage  the  lozenge 
bounds  the  WER  expected  for  the  given  variation  of  signal  amplitude  and  noise  level. 
As  shown,  for  measurement  errors  within  the  bounds  given  for  signal  and  noise  the  WER 
rate  will  vary  several  orders  of  magnitude.  Figure  10  compares  WER  results  observed  by 
computer  simulation  and  by  hardware  verification  testing.  At  any  signal  to  noise 
ratio,  the  results  correspond  within  one  order  of  magnitude.  This  is  well  within  the 
uncertainty  possible  because  of  measurement  errors  and  the  tolerance  of  the  operating 
point  (bandwidth  and  threshold)  of  the  device  under  test. 

Use  of  these  computer  simulations  will  provide  advance  information  on  the  adequacy  of 
the  DBS  design  or  of  the  need  to  make  design  changes  in  order  to  meet  system 
requirements.  In  either  event,  these  results  are  invaluable  and  do  result  in  a  fully 
defined  and  analyzed  DBS. 

5.  HARDWARE  ELEMENTS  OF  THE  SPACE  SHUTTLE  DATA  BUS 

The  Space  Shuttle  and  its  payload  are  equipped  with  highly  integrated  avionics,  the 
whole  of  which  is  tied  together  by  a  system  of  24  multiplexed  data  buses.  Sensor 
outputs  and  controller  commands  are  converted  to  digital  format  and  transmitted  as 
serial  bit  streams  on  the  Data  Bus  System.  The  Serial  Multiple  Interface  Adaptors 
(SMIA)  provide  the  electrical  transformations  needed  to  couple  the  host  avionics  to  the 
common  bus . 

The  Space  Shuttle  was  the  first  operational  flight  vehicle  to  utilize  a  digital  data 
bus  flight  controls  systems  mechanization  and  a  single  design  SMIA.  There  were  10 
different  hardware  items  supplied  by  8  different  companies  which  used  the  Singer 
Kearfott  SMIA  modules. 

Aside  from  the  shielded  twisted-pair  cable,  the  other  basic  element  of  the  bus  network 
is  the  Data  Bus  Couplet  (DBC)  which  effects  the  connection  between  the  Data  Bus  and  the 
SMIA. 

Another  important  module  used  in  the  Space  Shuttle  DBS  is  the  Data  Bus  Isolation 
Amplifier  (DBIA)  which  provides  bus  to  bus  isolation  and  acts  as  a  repeater  for  special 
portions  of  the  DBS.  In  particular,  it  services  the  SMIA  in  the  Solid  Rocket  Booster 
(SRB)  and  allows  separation  of  that  unit  without  affecting  the  remaining  DBS. 

The  block  diagram  of  Figure  11  depicts  these  essential  elements  in  their  relative 
electrical  relationships.  The  5  10  Processors  (computers)  are  shown  interfaced  to  the 
vehicle  subsystems  over  24  data  buses.  The  Shuttle  subsystems  are  connected  to  the 
data  buses  by  multiplex/demultiplex  (MDM)  units  (and  other  terminal  units)  which 
utilized  the  single  design  SMIA  for  coupling  to  bus.  The  total  numbers  of  each  module 
of  the  DBS  are; 


Single  Multiplex  Interface  Adapter  (SMIA)  -  99 

Dual  Multiplex  Interface  Adapter  (DMIA)  -  60 

Solid  Rocket  Booster  MIA  (SRB-MIA)  -  8 

Data  Bus  Coupler  (DBC)  -  222 

Data  Bus  Isolation  Amplifier  (DBIA)  -  2 


The  reader  now  being  aware  of  the  large  number  of  DBS  hardware  elements,  and  the  high 
quantity  of  Space  Shuttle  avionics  being  interconnected  can  better  appreciate  the 
critical  need  for  a  timely  and  detailed  simulation  program  of  the  type  described 
earlier . 

Each  of  the  DBS  modules  is  discussed  in  turn  below. 

Serial  Multiplex  Interface  Adapter  (SMIA) 

The  SMIA  is  the  interface  device  which  provides  electrical  and  data  format 
compatibility  between  each  avionics  box  and  the  common  data  bus.  Specifically,  it  is 
contained  within  the  particular  host  avionics  unit  LRU  and  provides  the  following 
functions; 


a.  Signal  Interchange  -  Receives  data  and  command  signals  from  the  multiplex 

channel  and  transfers  them  to  the  Host  subsystem.  Additionally,  receives 
data  and  common  signals  from  the  Host  and  transmits  them  onto  the  multiplex 
channel . 

b.  Signal  Format  Conversion  -  Decodes  Sync  and  Manchester  Data  to  NRZ  and 

inco3es~NRT'dirtirTormat~tb  Manchester  format. 

c.  Timing  and  Control  -  Generates  the  sequence  signals  necessary  to  execute, 

transmit ,  receive  and  transfer  functions.  Additionally,  it  accepts 

host-generated  control  signals. 

d.  Signal  Errors  -  Provides  indication  of  parity,  bit  count  and  non-valid 

Manchester  code  errors.  Design  opitimized  for  control  of  detected  error  rate 
of  10“8  and  undetected  error  rate  of  10"36. 


e.  Redundancy  -  Provides  redundant  control  over  transmitter  to  prevent  runaway. 

The  SMIA  is  contained  on  a  4.4"  x  2.5"  x  0.4"  board  (see  Figure  12)  which  is  mounted 
within  the  host  box.  It  weighs  0.3  pounds  and  dissipates  a  total  of  3  watts. 

Figure  13  is  a  block  diagram  of  the  SMIA.  Its  prinicipal  elements  are  described  below. 

a .  Receiver 

The  receiver,  which  accepts  a  Manchester  coded  signal  from  the  data  bus,  consists  of  a 
band-pass  filter  followed  by  a  detector.  The  filter  is  designed  to  reduce  signal 
bandwidth  thereby  achieving  a  high  degree  of  noise  rejection. 

b.  Transmitter 

The  transmitter  receives  data  from  the  host  LRO  and  converts  it  to  Manchester  code. 
This  data  is  shaped  to  control  the  proper  rise  and  fall  times,  then  amplified  and 
transmitted.  To  turn  on  the  transmitter,  all  signals  must  be  present,  thus  providing 
redundant  control  and  fail-safe  operation.  These  are  transmitter  enable  and  internal 
logic  control  signals.  Absence  of  any  of  these  signals  will  inhibit  the  output  drive 
circuit.  This  prevents  an  output  from  appearing  on  the  data  bus  during  power 
sequencing  and  prevents  transmitter  run-away. 

c .  Decoder 

The  Decoder  located  in  the  EDC  receives  a  detected  signal  in  Manchester  format  from  the 
output  of  the  Receiver,  converts  it  to  NRZ  format  and  transmits  it  to  the  Host. 

A  second  output  of  the  decoder  is  a  1  MHz  shift  clock  pulse  derived  from  the  input 
Manchester  code  to  control  the  transfer  of  the  NRZ  data  to  the  Host. 

The  DMIA  is  a  specially  packaged  version  of  the  SMIA,  being  two  MIA's  on  one  board. 
This  was  needed  to  meet  specific  requirements  of  the  Input/Output  Processors  (lOP). 
Each  MIA  of  the  DMIA  is  electrically  identical  to  the  SMIA. 

The  SRB-MIA's  are  also  specially  packaged  versions  of  the  SMIA.  In  this  case  a  larger 
heat  sink  and  a  more  rugged  structure  were  used  to  accommodate  the  environment  of  the 
Solid  Rocket  Booster. 

DATA  BUS  COUPLER  (DBC) 

The  DBC  unit  shown  in  Figure  12,  provides  the  Space  Shuttle  with  a  small,  compact,  data 
coupler  specially  designed,  built  and  tested  to  meet  the  requirements  of  the  Space 
Shuttle  Data  Bus.  This  unit  couples  the  Shuttle’s  time-division  multiplexed  data  and 
control  signals  between  the  main  bus  and  the  cable  stubs  connected  to  the  MIA's  in  the 
various  avionic  units  of  the  Space  Shuttle. 

The  DBC  consists  of  a  specially  designed  isolation  transformer,  two  isolation  resistors 
of  controlled  resistance  and  inductance  and  a  termination  resistor.  With  these 
components  the  DBC  provides  impedance  transformation,  dc  isolation,  common-mode  and 
differential  noise  rejection,  line  termination  capability,  and  protection  against 
shorted-stubs  affecting  the  main  bus  signals.  The  DBC  size  is  1  x  1  x  0.9  in.  and 
weighs  0.25  lbs. 

DATA  BUS  ISOLATION  AMPLIFIER  (DBIA) 

The  DBIA  shown  in  Figure  12  provides  bi-directional  communications  between  the  Space 
Shuttle  Orbiter  Bus  and  both  the  Solid  Rocket  Booster  (SRB)  and  the  Ground  Support 
Equipment  (GSE) .  Its  block  diagram  is  shown  in  Figure  14.  There  are  two  isolated 
independent  half-duplex  channels  each  with  a  separate  dedicated  power  supply.  It 
interconnects  two  300  foot  party  line  buses  and  can  drive  a  600  foot  cable  to  the  GSE. 
The  DBIA  provides  complete  isolation  between  the  Space  Shuttle  DBS  and  the  SRB  and  GSE 
buses  so  that  no  perturbation  is  reflected  back  into  the  Space  Shuttle  DBS.  The  DBIA 
is  contained  in  a  8.5"  x  7"  x  3"  enclosure  and  weighs  7.5  pounds. 


6.  MIL-STD-1553  COMPATIBLE  HARDWARE 

Electrical  bus  parameters  and  the  data  bus  waveform  of  the  Space  Shuttle  when  compared 
to  MIL-STD-1553  are  quite  similar  in  many  characteristics  but  have  several  significant 
differences.  Table  I  details  some  of  these  differences. 

TABLE  I. 

SIGNIFICANT  DIFFERENCES  SPACE  SHUTTLE  ORBITER  VS  MIL-STD- 1553B 

CHARACTERISTICS 

WORD  LENGTH 
GAP  BETWEEN  WORDS 
OUTPUT  VOLTAGE 
RISE  AND  FALL  TIME 
INPUT  IMPEDANCE 
INPUT  COMMON  MODE  REJECTION 
INPUT  SIGNAL  RESPONSE  RANGE 


SPACE  SHUTTLE 

28  BITS 
YES 

24-30V  P-P,  LINE  TO  LINE 
150  +50  NS 
>6  K”ohms 

+32V  PK,  LINE  TO  GND 
ff.6V  TO  15V  PK, 

LINE  TO  LINE 
3  X  10-7  @  4.0V  P-P 
AND  300  mV  RMS  NOISE 


MIL-STD-1553B 

20  BITS 
NO 

18-27V,  P-P,  LINE  TO  LINE 
200  +100  NS 
>1  K“ohms 

+10V  PK,  LINE  TO  GND 
0.43V  TO  7V  PK, 

LINE  TO  LINE 

10-7  8  2.1V  P-P 

AND  140  MV  RMS  NOISE 


WORD  ERROR  RATE  (WER) 


with  the  advent  of  MI  L-STD- 1 55  3  ,  the  data  bus  designer  is  required  to  considr-r  more 

than  the  simple  transparent  data  word  decoding,  validation  and  encoding  performed  by 

the  MIA  as  described  in  the  previous  section.  A  MIL-STD-1553  MUX  terminal  is  requireci 
to  function  as  a  Remote  Terminal  (RT) ,  or  a  Bus  Controller  (BC)  ,  or  a  Monitor  or  any 

combination  there  of.  Hence,  not  only  must  a  -1553  MUX  terminal  perform  the  same 

front-end  decoding,  validation,  and  encoding,  it  must,  in  addition,  decode  the  contents 
of  the  receiv'd  command  words,  data  words  and  status  words  to  determine  the  required 
actions.  These  actions  vary  as  a  function  of  the  MUX  configuration,  i.e.,  RT,  BC,  or 
Monitor.  For  example,  if  the  MUX  is  configured  as  an  RT  and  receives  a  comriand  word  it 
must; 

o  Decode  the  command  word  and  verify  the  RT's  terminal  address 

o  Determine  whether  to  transmit  or  receive  the  given  message 

o  Determine  the  number  of  words  in  the  message. 

In  addition  to  transmitting  or  receiving  data  words,  the  -1553  MUX  RT  unit  will  respond 
with  a  specific  status  word.  These  protocol  functions  require  the  designer  to  consider 
the  use  of  digital  logic  circuits  coupled  to  the  front-end  MIA  that  are  capable  of 
making  the  required  protocol  decisions.  The  fully  compatible  -1553  terminal  discussion 
that  follows  addresses  this  requirement  in  detail. 

The  present  day  DBS  designer  developing  a  -1553  compatible  bus  has  available  a  number 
of  architectural  and  hardware  options.  For  example,  Singer-Kear f ott  has  developed  a 
multiplexed  terminal  unit  of  universal  applicability  for  use  in  avionic  LRU's.  The 
MIL-STD-1553  Bus  Controller  and  Multiplex  Remote  Terminal  (BC/RT)  Module  utilizes  high 
density  microcircuits  and  a  flexible  two-part  architecture  which  is  virtually 
independent  of  host  peculiar  requirements,  and  is  therefore  usable  in  a  wide  range  of 
applications  with  little  or  no  modification.  It  is  designed  to  be  located  in  the  host 
LRU  since  the  entire  module  is  packaged  on  a  single  card  and  requires  less  than  10 
watts  in  most  applications. 

The  BC/RT  can  operate  as  a  controller  or  as  a  remote  terminal.  The  mode  of  operation 
is  selectable  by  a  Master/Slave  logic  signal  or  via  the  -1553  mode  command  for  dynamic 
bus  control  transfer. 

When  designated  as  a  remote  terminal,  the  BC/RT  is  responsive  to  all  -1553A  and  B 

command-response  requirements.  When  designated  as  a  bus  controller,  the  BC/RT 
initiates  and  supervises  all  data  exchanges  over  the  dual  redundant  -1553  serial  data 
bus.  Data  storage  and  retrieval  at  the  host  parallel  data  bus  is  via  direct  memory 
access. 

Features  include: 

a.  Packaged  on  a  single  card  module 

b.  Performs  as  a  Bus  Controller  and/or  Remote  Terminal  capable  of  executing 

-1553B  Mode  and  Illegal  Command  Word  Processing 

c.  Contains  separable  Word  Processing  and  Message  Processing/Microcontroller 
sections. 

d.  Word  Processing  section: 

o  Transparent  interface  for  -1553A  or  B  compatibility 

o  Interfaces  with  dual  redundant  MUX  buses.  Performs  all  fast  rcspon;^(' 

front-end  channel  functions,  including  word  validation,  and  command  and 
data  word  detect  and  decode. 

o  Provides  all  necessary  parallel  data  with  the  sense  and  control  signals 
required  by  the  Message  Processing/Microcontrol let  section. 

e.  Message  Processing  Microcontroller  section; 

o  Transparent  architecture  for  interfacing  with  various  hosts  including 
those  with  microprocessors 

o  Programmable 

o  16-bit  bidirectional  data  bus 

o  16-bit  address  bus 

o  Direct  Memory  Access  capability  to  interface  with  host  microprocessor 

o  Provides  memory  protection  and  ability  for  indirect  addressing  of  host 

main  memory. 

Figure  15  is  a  block  diagram  showing  the  two  part  architecture  of  the  BC/RT  and 
identifying  the  large  number  of  functions  which  are  packaged  on  the  single  card  by  the 
optimum  utilization  of  LSI  technology. 


Ccanununicat  1  on  with  the  host  is  via  a  16-bit  bidirectional  data  bus.  A  16-bit  addre:;:; 
bus  and  direct  memory  access  circuits  perform  the  functions  of  storage  and  retrieval  o! 
data  to-and-from  host  memory.  Other  significant  circuit  elements  are  a  16-bit  terminal 
bus  for  fast  response  data  manipulation  and  transfer,  and  the  -1553  Status  Word  and 
Last  Command  Word  registers.  In  addition,  an  on-board  scratchpad  register  and 
incrementer  are  provided. 

The  BC/RT  design  has  been  packaged  in  various  configurations  for  utilization  in  the 
F-111  Weapons  Navigation  Computer  (AYK-IS)  ,  B-IB  Data  Bus  Multiplex  Interface  Module 
(MIM)  and  the  U.S.  Army's  AN/ASN-137  Doppler  NAV  system.  Figure  16  is  a  photograph 
showing  each  of  the  above  mentioned  terminals.  Physical  size  varies  from  less  than  one 
ATR  to  a  full  ATR  card  dependent  on  complexity  of  the  message  processor,  cooling 
characteristics  and  the  type  of  componentry  used  {DIPS  or  Flatpacks) . 

The  MIL-STD-1553B  BC/RT  section  of  the  F-111  Weapons  Navigation  Computer  successfully 
completed  U.S.  Air  Force  SEAFAC  (System  Engineering  Avionics  Facility)  testing  at 
Wright  Patterson  AFB  in  May  of  1983. 

7.  FUTURE  TRENDS 

The  next  generation  of  avionic  data  buses  is  moving  towards  a  mix  of  wire  and  optical 
fiber,  utilizing  data  rates  of  10  to  20  megabits  per  second  in  burst  modes.  These  high 
data  rates  are  essential  for  future  aircraft,  space  craft  or  space  stations,  and  will 
exploit  the  benefits  provided  by  the  next  generation  of  digital  VHSIC  based  avionic 
systems  for  timing  (scheduling  of  events),  accuracy  (freshness  of  data),  turn  around 
times,  and  system-level  synchronization.  Computations  and  man-machine  interface 
decisions  will  be  more  efficiently  handled,  thereby  enhancing  mission  success. 

Studies  are  underway  by  groups  such  as  the  SAE  AE-9B  High  Speed  Data  Bus  (HSDB) 
Subcommittee.  These  studies  encompass  various  architecture,  topology  and  protocol 
candidates.  Local  Area  Network  (LAN)  architectures  based  on  the  International 
Standards  Organization  reference  model,  the  Open  System  Interconnection  (OSI),  are 
providing  a  framework  for  defining  the  various  layers  of  communication  protocols  with 
specific  functions  isolated  at  each  level.  One  significant  advantage  to  layered 
protocols  is  that  differing  lower-level  implementation  details  can  be  hidden,  while 
compatiblity  can  still  be  achieved  at  the  higher  levels.  The  AE-9B  HSDB  Subcommittee's 
goal  is  to  have  a  "strawman"  specification  by  mid-'84  and  a  final  specification  by  end 
of  '86. 

As  high  speed  data  buses  and  local  area  networks  rapidly  evolve  into  our  future 
aircraft  and  spacecraft  applications  the  DBS  designers  and  data  bus  avionic  suppliers 
will  be  challenged  to  create  highly  sophisticated  analysis  and  simulation  techniques 
for  early  verification  of  data  bus  and  hardware  performance.  The  work  described  in 
this  paper  will  hopefully  provide  a  useful  point  of  departure  for  these  future 
undertakings. 
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WHY  MULTIPLEXING? 


AIRCRAFT  WITH  MANY  WIRES  AIRCRAFT  WITH  2  WIRES 

CONNECTING  MANY  SYSTEMS  VERSUS  CONNECTING  MANY  SYSTEMS 


•  Multitude  of  interconnectinq  wires  replaced  with  a  vltv  s'nall 
number  of  twisted  shielded  pairs. 

•  Standardization  of  interfaces  is  promoted, 

•  System  reconfiguration  is  immensely  simplified. 

•  Required  redundancy  is  buiU  into  system  concept. 

•  System  checkout  can  be  accomplished  at  one  point. 

•  Wiring  checkout  of  the  vehicle  'S  simplified  since  the  signals  used 
for  checkout  can  be  the  san>e  as  the  operational  signals 
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TR  SOURCE  IMPEDANCE  (TRANSMIT  MODE)  MODEL 


VS  =  Source  Voltage 
R1  °  Source  Resistance 
R2,  LI  °  Wave  Shaping  Network 
R3  =  Primary  Resistance 
R4  =  Core  Loss 


RS  =  Secondary  Resistance 
L2  =  Leakage  inductance 
L3  =  Primary  Inductance 
C  =  Equivalent  CapacKance 

(Windings,  Shield  and  Stray  Effects) 
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TR  INPUT  TRANSFORMER  (RECEIVE  MODE)  MODEL 
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,  C  =  Filter  Input  Impedance 
R2  =  Output  Impedance 
G(S)  °  Filter  Transfer  Function 
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COMPARISON  OF  COMPUTED  AND  MEASURED  WAVEFORMS 
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FIGURE  8C  COMPARISON  OF  COMPUTED  AND  MEASURED  WAVEFORMS 
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LA  CERTIFICATION  DES  LOGICIELS  EMBARQUES  : 


UNE  APPROCHE  GLOBALE  ET  PROGRESSIVE 
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Electronlque  Serge  DASSAULT 
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RESUME 


La  complexity  et  la  crlticltl  crolssante  des  fonctlons  assuryes  par  les  loglciels  dans  des  syste- 
mes  vltaux  pour  la  sycurlty  engendrent  un.  difficile  probiyme  de  certification  de  ces  logiclels. 

Les  mythodes  de  travail  et  outila  (en  partlculler  de  test)  utllisys  ^  1*ESD  dans  le  cadre  de  pro- 
Jets  tela  que  le  Mirage  2000,  ont  permis  Jusqu*3  aujourd'hul  d*atteindre  un  niveau  eleve  de  qua¬ 
lity  des  produits  logiciels*  Cependant,  la  croissance  continue  du  volume  des  programmes  et  les 
fonctions  de  plus  en  plus  vitales  quells  exercent,  exigent  la  poursuite  de  I'effort  entreprls  dans 
le  domaine  de  I’assurance-quallty «  En  partlculier,  les  techniques  de  vyrlflcation  et  de  validation 
telles  qu’elles  sont  mlses  en  oeuvre  actuellement  sont  dycrites.  Les  ytudes  et  dy veloppements  en 
cours  sont  ensulte  exposys  :  systyme  d*alde  I  la  definition  des  besoins  logiclels,  syst^me  d*alde 
aux  tests  dynamiques  de  programmes  temps  ryel,  dyflnitlon  des  mesures  de  quality  qui  peuvent  ytre 
pryievyes  en  s'appuyant  sur  un  dyveloppement  structury  et  les  produits  formallsys  qui  en  sont 
issus* 


1.  INTRODUCTION 


Le  fonctlonnenent  d'un  nonbre  toujours  plus  Important  de  systSmes  complexes  repose  sur  I’utlllsatlon 
des  moyens  Infonaatlques  et  en  partlculier  du  loglclel.  Ces  systSmes  integrant  du  loglciel  reprisen- 
tent  souvent  des  enjeux  trds  €lev£s  sur  le  plan  dconomique  ou  sur  le  plan  de  la  sicurlt^  des  personnes 
et  des  nations.  Tous  les  dooalnes  se  trouvent  affect€s  :  processus  Industrials,  gestlon  des  entrepri- 
ses  et  administrations,  recherche  sclentlflque  et  technologlque,  Education,  santg,  lolslrs  meme  ...! 
Dans  le  domaine  des  systSmes  de  defense,  la  place  du  loglciel  augments  sans  cesse.  En  effet,  on  en  at¬ 
tend  I'accrolssement  de  I'lntelllgence  de  ces  systSmes,  c'est  d  dire  leur  capacity  d  mleux  exercer  de 
faqon  autonome  leurs  fonctlons  de  surveillance  ou  de  destruction*  Dans  ce  mdme  domaine,  I'apport  du 
loglciel  intervlent  sous  le  double  aspect  ficonomle  et  sScurltS.  Le  loglciel  permet  d'accroltre  I'effl- 
cacltS  des  armes,  done  d'en  dlmlnuer  la  quantlti  d  puissance  €gale  ;  11  peut  aussl  permettre,  par  la 
sophistication  qu'll  confdre  au  systSme  englobant,  une  sup€riorlt6  sur  les  forces  adverses  qui  est  un 
facteur  de  s£curit£. 

Cependant,  la  p£n£tratlon  crolssante  du  loglciel  dans  des  systdmes  au  caraetdre  aussl  vital  impose 
qu'un  degrS  de  confiance  Slev£  pulsse  Stre  placS  dans  ce  loglciel*  Or,  qu’en  est-11  aujourd'hul  ?  La 
plupart  des  logiclels  existants  prSsentent  des  lacunes  de  fiabllltd  :  seul  un  fonctlonnement  sous 
contrSle  humaln  permet  leur  exploitation  sans  risque  majeur*  De  ce  fait  leur  utilisation  reste  limltSe 
d  tous  les  cas  oQ  ce  contrdle  humaln  est  falsable*  II  en  sera  alnsl  tant  qu’ll  ne  sera  pas  possible 
d'obtenlr  des  dlSments  quantltatifs  d'apprdclatlon  sur  la  sQretd  de  fonctlonnement  des  logiclels* 

C'est  done  en  ces  termes  que  se  pose  le  probldme  de  la  certification  des  logiclels* 

L'artlcle  abordera  successlvement  les  points  sulvants  : 

-  Qu'eat-ce  que  la  certification  des  logiclels  ? 

-  Qu'apportent  les  techniques  de  I'assurance-qualltS  ? 

-  Qu'eat-ce  que  la  "flabllltS  du  loglciel”  ? 

-  L'exemple  du  dSveloppement  des  logiclels  Mirage  2000 

-  La  politique  de  I'ESD  en  matldre  d'assurance-qualltS  :  une  vole  vers  la  certification* 


2*  LA  CERTIFICATION  DES  LOGICIELS  :  UN  PROBLEME  OUVERT 

2*1  La  certification 


Dans  les  divers  domalnes  od  des  systdmes  accompllssent  des  tdches  critiques,  11  exlste  des  procedures 
formallsCea  de  certification*  Ces  procedures  revStent  des  formes  dlverses  et  sont  identlfiees  par  des 
terminologies  dlffCrentes  selon  les  contextes,  c'est  alnsl  qu'on  parle  souvent  aussl  de  qualification 
II  convlent  done  tout  d'abord  de  diflnlr  en  gSneral  le  concept  raSme  de  certification,  tel  qu'll  est 
entendu  dans  le  prSsent  article* 


La  certification  d*un  systeme,  ou  d'un  sous-ensemble  fonctlonnellement  autonome  d'un  systdme,  comprend 
l*ensemble  des  procedures  qul  perraettent  de  demontrer  que,  dans  son  etat  final,  le  systeme  consldere 
accompllra  ses  fonctions  sans  mettre  en  danger  la  securite  des  personnes  et  des  blens.  Kn  ce  qui 
concerne  les  systemes  classlques,  ces  procedures  ont  generalement  atteint  un  degre  de  raaturlte  eieve  ; 
en  revanche,  1 ' 1 nt roduct ion  croissante  de  sous-systemes  numeriques  n'a  pas  au  debut  suscite 
d 'amenagement  des  techniques  de  certification.  Jusqu’a  recemment,  les  logiciels  integres  aux  systemes 
n'af fectaient  pas  de  fonctlon  essentlelle  ;  la  premiere  reaction  a  done  ete  de  les  assimller  aux  dis- 
positlfs  analogiques  qu'lls  rempla^a lent  en  leur  appliquant  les  procedures  habituelles.  Cependant, 
avec  1 ' accrolssement  du  role  fonctionnel  du  loglclel  et  la  crlticlte  qu'atteignent  certains  sous- 
systemes  numerises,  11  est  apparu  qu'll  fallalt  adapter  les  regies  utllisees  en  fonctlon  des  problemes 
speciflques  lies  a  cette  technologle. 

2.2  Les  particularites  du  loglclel 

En  effet,  le  loglclel  presente  deux  caracteristiques  qul  le  dl f ferenclent  des  technologies 
”materlelles" ,  et  qul  rendent  son  apprehension  difficile  : 

-  La  combinatolre  de  ses  etats  possibles  est  trds  vlte  glgantesque  ;  ceci  impllque  que  des  essals 
exhaustlfs  ne  peuvent  etre  realises. 

-  Les  programmes  sont  Inimaterlels  ;  si  les  textes-source  representent  une  description  statlque  de 
ces  programmes,  en  revanche,  la  dynamlque  d*executlon  ne  peut  etre  decrlte  qu'au  travers  de  do¬ 
cuments  ad  hoc  ;  dans  la  pratique  actuelle,  aucun  document  ad  hoc  ne  perraet  de  presenter  de 
faqon  simple  tous  les  aspects  dynamlques  d'un  loglclel  temps  reel  de  quelque  complexite. 

De  cette  seconde  constatatlon  sont  nees  les  idees  sulvantes  : 

-  Le  loglclel  forme  un  tout  qul  comprend  les  programmes  et  la  documentation  descriptive  des  divers 
points  de  vue  :  utilisation,  ddveloppement ,  maintenance  ;  la  presence  de  la  documentation  est  en 
effet  la  condition  necessalre  a  la  visibility  du  prodult. 

-  La  production  de  loglclel  ne  peut  se  redulre  a  la  programmatlon,  mais  dolt  Inclure  I'^tabllsse- 
ment  de  documents  formalisys  pour  toutes  les  Stapes  du  d^ veloppement  ;  ces  documents  devront 
permettre  une  description  exhaustive  et  cohdrente  de  tous  les  aspects  du  prodult  final  et  cecl 
moyennant  des  aceds  faclles  aux  diverses  informations  :  ce  souhait  lygltime  n'est  pas  encore 
compldtement  satlsfalt,  car  11  engendre  des  problemes  techniques  ardus  ;  une  discipline  spyda- 
llsye,  le  g^nle  loglclel  se  consacre  I  la  rlisolutlon  de  ces  probllmes. 

2.3  Erreurs  et  pannes 

D'autre  part,  le  loglclel  prysente  d'autres  spydflcitys  : 

-  Construction  purement  loglque,  11  est  potentlellement  ‘*dymontrable’*,  puisque  son  fonctionnement 
n'est  pas  soumls  aux  alias  de  la  physique. 

-  De  par  sa  nature  Immatyrlelle ,  11  Ignore  I'usure  et  done  les  "pannes. 

Ces  considerations,  a  priori  favorables,  doivent  cependant  itre  tempiries. 

Hormis  en  ce  qul  concerne  des  programmes  de  tallle  tres  ridulte  et  de  f onctlonnallte  assez  simple,  11 
s'est  avire  impossible  S  ce  jour  de  demontrer  la  validity  d'un  code.  En  effet,  la  preuve  d  divelopper 
constltue  en  sol  un  travail  consldirable,  et  du  fait  de  I'exploslon  combinatolre  des  algorlthmes 
utlllsySyS'apparente  au  probldme  du  test  exhaustlf.  Par  allleurs,  la  preuve  de  programme  Impllquf-  que 
les  spydf Icatlons  solent  parfaltement  modyilsies,  ce  qul  est  rarement  riallsi. 

SI  le  loglclel  ne  connalt  pas  les  pannes  causies  par  le  vlellllssement,  en  revanche  du  fait  de  sa  com¬ 
plexity,  11  est  souvent  entSchi  d'erreurs  ryslduelles  (de  definition,  de  conception,  de  codage).  Ces 
erreurs,  lorsqu'elles  sont  diclenchyes,  ont  des  effets  comparables  aux  pannes  dans  le  raatirlel.  Enfln, 
les  programmes  s'exicutent  dans  un  envlronnement  materiel  :  calculateur,  moyens  d'entree-sortie  ;  cet 
envlronnement  est  sujet  aux  diverses  sources  de  pannes  (usure,  conditions  physiques  de  fonctionnement 
non  nomlnales,  erreurs  de  conception  ou  defauts  de  fabrication)  qul  peuvent  avoir  sur  le  loglclel  des 
consiquences  catastrophlques . 

2.4  La  certification  appliquie  au  loglclel 

De  tout  ce  qul  vlent  d'etre  dlt,  11  apparalt  que  la  certification  du  loglclel  a  une  raison  d'etre,  et 
que  les  procidures  habltuellement  utlllsies  pour  d'autres  technologies  doivent  au  minimum  etre 
adapties . 

Puisque  1  *  exhaust Ivity  du  test  de  certification  est  exclue,  11  convlent  de  combiner  deux  approches  : 

-  L'appllcatlon  de  sirles  de  test  qul  sont  solgneusement  itablles  afln  d'itre  reprisentat Ives  tant 
du  fonctionnement  normal  du  systiroe,  que  des  anomalies  susceptlbles  de  se  produire . ( SOR  79] 

-  Le  contrdle  qu'un  certain  nombre  d'opiratlons  de  "fabrication"  du  loglclel  obilssent  a  des  crl- 
tires  reconnus  pour  contrlbuer  S  la  quality  du  prodult  final  (ou  du  molns  ^  ceux  de  ces  crltires 
qul  Intiressent  la  certification,  en  partlculler  la  sicurlty  de  fonctionnement).  T1  faut  done 
orlenter  pour  une  part  la  certification  du  loglclel  vers  la  verification  du  respect  de  procidu- 
res  au  long  du  di veloppement .  Cette  virlflcation  ne  peut  pour  I'Instant  s'appuyer  que  sur  des 
crltires  qualltatifs  en  majority.  II  Importe  cependant  de  progresser  rapldement  dans  la  vole  des 
mesures  objectives,  car  "mesurer  e'est  connaltre"  ;  11  n'est  pas  de  technique  mature  -ians  mitro- 
logle  ytablle. 


3.  L’ ASSURANCE-QUAI>ITE  DU  LOr.iriEl. 


Le  rQle  de  I'assurance-quallte  dans  la  certification  du  logtclel  ayant  6te  Identifie,  M  conviont 
d'expliciter  ce  qa'est  I'assurance-quallte,  et  quelle  est  son  influence  sur  les  problomes  lies  a  la 
cert  1 f Icat ion. 

3.1  Assurance-quaiite  et  controle-qual ite  [LAW  81] 

Si  le  concept  de  controle-qualite  est  blen  etabli  dans  I'lndustrie,  celui  d 'assurance-qiia 1 1 1 e  I'est 
beaucoup  moins.  Cependant,  la  litterature  araericaine  et  les  performances  Japonaises  ont  mis  a  la  mcde 
diverses  approches  que  I'on  peut  classifier  comme  participant  plus  de  I'assurance  quo  du  contrdle  de 
la  qualite.  En  effet,  alors  que  le  controle-qualite  a  pour  objet  la  verification  apres  coup  de  la 
conforraiti  d'un  prodult  a  des  specifications  (fonctionnelles,  technologiques ,  d 'e nvl ronnement ,  de 
normes...),  I'assurance-qualite  se  propose  de  garantir  et  verifier  progressivement  la  qualite  d'un 
produit  au  cours  de  son  elaboration.  [RGA  82] 

D'autre  part,  alors  que  le  controle-qualite  est  le  fait  d'une  equipe  specialisee  dans  cette  fonctlon, 
I'assurance-quallte  Impllque  le  personnel  productif.  En  effet,  si  les  dispositions  generales  visant  a 
I'obtentlon  de  la  qualite  relevent  d'un  groupe  de  special istes ,  la  construction  de  la  qualite  releve 
essent ielleraent  de  I'equlpe  de  realisation.  La  construction  de  la  qualite  est  la  raise  en  oeuvre,  dans 
le  cadre  d'un  pro jet,  des  dispositions  generales  et  particulleres  d'assurance  qualite  ;  elle  est  done 
d'autant  plus  efficace  qu'elle  est  totalement  Integree  a  la  production.  De  ce  fait,  1  * Impl icat ion  des 
equlpes  op^rationnelles  dans  la  garantle  de  la  qualite  est  evidemment  plus  forte,  et  la  motivation  ge- 
nerale  s'en  trouve  am^lloree.  Ce  type  de  procedure  suppose  neanmoins  que  les  operationnei.  soient  suf- 
fisamment  formas  a  la  qualite. 

En  ce  qul  concerne  le  logiclel,  11  faut  ^galement  remarquer  qu'll  n'est  pas  le  resultat,  contrairement 
a  la  majorlte  des  autres  produits  industriels,  d'une  production  de  serie,  mals  au  contralre  qu'll 
s'aglt  en  general  d'une  production  individual Isee.  Par  consequent,  l'ld§e  de  controle  a  posteriori 
s'avere  peu  adaptee  :  rentable  si  elle  presente  un  caract^re  repetltlf,  I'operatlon  de  controle  est 
onereuse  sur  un  prodult  unique  et  peut  aboutlr  a  la  conclusion  que  le  produit  est  mauvais,  alors  qu'll 
est  sur  le  point  d'etre  livre  !  II  est  done  clalr  qu'en  ce  qui  concerne  la  production  de  logiclel, 
seule  une  procedure  de  controle  "au  fll  de  I'eau",  susceptible  de  demander  des  corrections  tout  au 
long  du  d4ve lopperaent ,  pr^sente  les  garantles  necessaires  a  I'obtentlon  d'un  logiclel  de  quality  dans 
des  conditions  maltrlsables  de  couts  et  delals. 

3.2  La  quality  du  logiclel 

Pour  assurer  la  quality  du  logiclel,  ll  est  d'abord  n^cessaire  de  la  d^finlr.  Une  erreur  communlraent 
r^pandue  consiste  J  I'assimller  i  I'absence  d'erreurs  dans  le  code  executable.  Or,  nous  I'avons  dlt 
plus  haut,  le  logiclel  n'est  pas  unlqueraent  du  code,  mais  aussl  un  ensemble  de  documents  qul  le 
d^crlvent.  La  quality  du  prodult  ne  peut  done,  s'appuyer  que  sur  celle  de  tons  ses  divers  constituents. 
Une  difinltion  g§nlrale  de  la  qualite  peut  ^tre  reutllls^e  avec  profit  :  e'est  "I’aptltude  d'un  pro¬ 
dult  ou  service  ^  satisfaire  les  besolns  des  ut 1 1 1 sat eurs" . 

Cette  definition,  deontologlqueraent  sat isfalsante,  demande  toutefois  i  ^tre  predsee  ;  s'aglssant  d'un 
produit  par  nature  complexe  et  Imraateriel,  et  de  surcrott  couteux  I  reallser  dans  I'ltat  actuel  de 
I'art,  il  convlent  de  se  limiter  aux  "hesoins  sp^c 1 f l^s  des  ut i 1 1 sateurs” .  En  effet,  le  besoin  en  la 
matlire  est  chose  floue,  done  modulable  on  fonctlon  de  critdres  contradlctol res  tels  :  les  raoyens  fi¬ 
nanciers,  les  delals  necessaires  de  raise  A  disposition,  la  perennlte  envisages,  1 ’ a ppreclat ion  de  la 
crlticit^...  S'll  n'est  pas  toujours  possible  d'attendre  d'\in  utlllsateur  qu'll  forraule  spontanement 
tous  ces  cri.eres,  11  appavtlent  en  revanche  au  reallsateur  de  les  reveler  autant  que  falre  se  peut, 
afln  que  la  definition  du  logiclel  A  reallser  decrlve  ce  sur  quol  les  parties  s'accordent  pour 
contracter. 

Quelques  travaux  Interessants  ont  ete  effectues  sur  les  mesures  de  la  qualite  du  logiclel.  E 
partlculler,  J.A.  Me  Call  a  definl  des  facteurs,  crltdres  et  metrlques  qul  perraettent  I'evaluatlon  de 
la  qualite.  Un  tel  systdme  de  mesure  petit  permettre  la  specification  d'exlgences  de  niveau  de  qualite. 
8i  les  travaux  actuels  ne  sent  pas  encore  dlrecteraent  utlllsables,  ils  constituent  cependant  une  soll- 
de  base  de  reflexion  sur  laquelle  s'appule  I'KSP  pour  ses  propres  etudes. 

3.3  Les  missions  de  I'assurance-quallte 

L ' a ssurance-q ua L I te  du  loglciel  au  sein  d'un  organlsme  roraporte  trols  volets  successlfs  : 

-  Definition  des  regies  generales  d  '  a  sstirance-qual  1 1  e 

-  Mlse  en  place  d’un  plan-quallte  potir  un  pro jet  donne 

-  Procedures  de  "Sulvi  de  la  qualite”  tout  au  long  du  pro jet. 
a)  Ragles  generales  d  '  asstirance-qua  1  i  te  ( manue  1-qual  I  te) 


Ces  regies  decrlvent  le  f onct lonnement  global  des  procedures  d'assurance-quallte.  Elies  defi- 
nlssent  en  partlculler  le  ou  les  cycles  de  vie  possibles  du  loglciel  (e'est  a  dire  le  decoupage 
en  etapes),  et  les  responsabl lltes  Impllquees  dans  les  diverses  procedures.  Elies  peuvent  aussl 
etabllr  des  standards,  que  ce  sott  en  matiero  de  documentation,  de  metbodes,  techniques  ou 
outlls  de  developpement  I  utlllser. 

b)  Plan-quallte 


En  fonctlon  des  besolns  et  contralntes  exprimes  par  I ' ut 1 1 1 sateur  et  du  manuel-qualite  cite 
cl-dessus,  le  responsable  de  pro jet  et  le  groupe  qualite  de  I'organlsme  charge  du  developpement 
redlgent  un  plan  precis  des  dlfferentes  actions  destlnees  A  garantir  I'obtentlon  de  la  qualite 
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requlse  pour  le  prodult  consider^.  Ceci  peut  comporter  le  cholx  parml  les  alternatives  offerees 
dans  le  manuel-quallt^ ,  mals  ^galement  I'ajout  d*actlons  plus  d§talll€es  et  de  normes  a 
respecter.  En  outre,  une  planif ication  et  des  responsablllt^s  precises  dolvent  etre  Stabiles. 

c)  "Suivi  de  la  qualite" 


Ce  suivi  est  connu  dans  la  litterature  anglo-saxonne  sous  le  slgle  de  “V  &  V”  (verification  et 
validation).  II  regroupe  l*ensemble  des  operations  d*evaluation  qui  ont  etc  prevues  dans  le 
plan-qualite. 

-  Les  verifications 


Les  verifications  sont  les  operations  qui  consistent  S  s*assurer  qu'u.i  produit  intermediaire 
ou  final  du  developpement  est  conforme  aux  exigences  qui  lui  ont  ete  assignees  dans  I'etape 
anterieure,  ainsi  qu*aux  regies  decrites  dans  le  plan-qualite . 

Elies  reposent  essentiellement  sur  la  tenue  de  revues  de  proJet,  qui,  selon  leur  degre 
d*lmportance,  peuvent  etre  conduites  en  presence  de  representants  du  client  et  de  merabres  du 
groupe-qualite ,  ou  restreints  I  certains  raembres  de  l*equipe  de  projet.  Bien  qu’elles  puis- 
sent  (et  doivent  de  plus  en  plus  d  I'avenir)  s*appuyer  sur  des  elements  quantitatifs,  elles 
sont  par  nature  qualitatives .  Les  verifications  s'effectuent  sur  les  descriptions  successives 
du  logiclel  (definition,  conception  globale,  conception  detainee,  code). 

“  Les  validations 


Au  contralre  des  verifications,  les  validations  s'attachent  5  l*aspect  fonctionnel  des 
produits,  et  non  ^  leur  aspect  formel.  Elles  portent  done  essentiellement  sur  les  prograounes 
et  consistent  a  verifier  leur  conformlte  vis-a-vis  du  niveau  de  specification  correspondant 
(conception  detaillee  pour  le  module,  specification  f onctionnelle  pour  la  f onction. . . ) .  Ces 
operations  consistent  essentiellement  aujourd*hui  d  effectuer  des  tests  de  programme. 

3. A  Qualite  et  certification  du  logiclel  [HOW  82] 

L'evaluation  de  la  qualite  a  un  domaine  d 'application  beaucoup  plus  large  que  la  certification.  La 
qualite  du  logiclel  s'apprecie  sur  ses  caracterlstiques  d'exploltation,  de  maintenance  et  de  transport. 
II  est  evident  que  maintenance  et  transport  sortent  du  cadre  des  preoccupations  de  la  certification, 
qui  ne  s'interesse  par  ailleurs  qu'd  quelques  aspects  des  caracterlstiques  d 'exploitation. 

SI  I'on  reprend  la  termlnologle  de  Me  Call,  la  qualite  d'un  logiclel  peut  se  caractlriser  par  des 
"facteurs".  Ces  facteurs  sont  les  caracterlstiques  apprehendables  de  I'cxtirieur,  par  un  utillsateur 
du  logiclel. 

Au  plan  de  1 ' exploitation  du  logiclel,  cinq  facteurs  sont  Identlfiee  :  validite,  robustesse,  efficaci- 
te,  maniabillte  et  securlte.  L'efflcacite  et  la  manlablllte  qui  sont  des  facteurs  respectivement  eco- 
nomlque  et  ergonomlque,  sortent  du  champ  d'lnteret  de  la  certification. 

En  revanche,  validite,  robustesse  et  securlte  sont  des  facteurs  qu'll  convient  d'utlllser  dans  le  cadre 
d*une  procedure  de  certification  pulsqu'ils  condltionnent  ce  qu'on  peut  appeler  id  la  "f labillte"  du 
produit. 


A,  APPROCHES  DE  LA  FIABIUTE  EN  LOGICIEL 

Ainsi  que  nous  I'avons  dit  plus  haut,  le  logiclel  ne  connalt  pas  I'usure.  Les  concepts  fiabllistes 
tradltionnels  ne  lui  sont  done  pas  applicables.  Pourtant,  il  est  souhaitable  de  pouvolr  evaluer  a 
priori  la  probablllte  de  bon  f onctlonnement  d'un  logiclel.  Ceci  necesslte  une  approche  speciflque  et 
I'emploi  d'une  termlnologle  bien  definle. 

A. I  Le  concept  de  fiabilitg  de  logiclel  [TRO  79] 

La  flablllt^  peut-Stre  d§finle  en  ces  terraeb  :  "probablllte  qu'un  disposltlf  accomplisse  une  fonction 
requlse  dans  des  conditions  d'utilisation  et  pour  une  p^rlode  de  temps  determinees" . 

Du  fait  de  la  non-d^gradatlon  dans  le  temps,  cette  caracteristique  ne  peut  etre  prSvue  pour  le  logi¬ 
clel  en  fonction  de  statistiques  sur  les  temps  de  survie  de  ses  constituants.  T1  s'ensuit  qu'il  est 
n^cessalre  de  s'appuyer  sur  des  grandeurs  mesurables  et  forteraent  corr^lees  d  la  probability  finale 
de  bon  fonctlonnement.  L'dtat  de  la  recherche  a  Identlfle  de  telles  grandeurs  :  quality  des  documents 
de  spycif ication  et  de  conception,  complexity  du  code,  taux  d'exhaustivlte  des  tests,  nombre  de  dy- 
fauts  ryslduels. 

Compte  tenu  de  ce  qui  vient  d'etre  dlt,  la  flabllity  du  logiclel  peut  ytre  definie  comme  suit: 
’’Aptitude  d  accomplir  sans  dyfalllance  chaque  fonction  speclfiye,  avec  la  prydslon  requlse,  dans  des 
conditions  d'utillsatlon  donnyes  et  pour  une  perlode  de  temps  dyterralnye". 

La  notion  de  dyfalllance  ytant  susceptible  de  varler  d'un  utillsateur  H  1 'autre,  11  Importe  que  chacun 
dytermlne  le  niveau  de  gravity  qu'll  donne  3  un  type  de  defalllance  ;  ceci  peut  se  falre  par  la  dyfl- 
nltion  de  classes  de  critlclty  (DO  178) 

Dans  le  cas  d'un  logiclel  multi-fonctions,  11  se  peut  que  les  nlveaux  de  critlclty  affectys  aux  dlffe- 
rentes  fonctlons  solent  dlstlncts  ,  e'est  pourquol  11  importe  de  considyrer  Isoiymcnt  chaque  fonction. 
La  prydslon  se  ryf^re  3  la  raise  en  oeuvre  d'algorlthraes  numyrlques,  dont  1 ' 1  no  tab!  1  Ite  ou  la  dyrive 
dans  le  temps  constituent  des  causes  de  non-f onct lonnement . 


Enfln  les  conditions  d ' utilisation  doivent  ^galement  etre  preclsSes,  afin  que  le  logtciel  coraporte  les 
precautions  necessalres  a  sa  protection  face  aux  defalllances  et  agressions  de  1 'environneraent 
(materiel,  loglciel,  humain) . 

4.2  Fiabllite,  Valldlte,  Robustesse 

Parml  les  divers  facteurs  de  qualite  susceptlbles  d'etre  attribues  d  un  logiciel,  deux  sont  particu- 
lierement  lies  a  la  notion  de  fiabilite  :  la  validite  et  la  robustesse. 

La  validite  se  difinit  comme  etant  I'aptitude  d'un  logiciel  a  accomplir,  avec  satisfaction,  chaque 
fonction  specifiee  pour  laquelle  il  a  ete  prevu  et  ce  dans  des  conditions  d ' ut 1 lisat ion  donnees. 

La  robustesse  se  deflnit  comme  etant  I’aptitude  d'un  logiciel  1  poursuivre,  avec  plus  ou  raoins  de 
satisfaction,  chaque  fonction  specifies  pour  laquelle  il  a  ete  prevu,  et  ce  dans  des  conditions 
d'utillsatlon  non  nominales  provoquant  des  perturbations  auxquelles  11  est  cense  reslster. 

Etant  donnee  la  definition  que  nous  avons  enonce  plus  haut  de  la  fiabilite  du  logiciel,  un  logiciel 
fiable  dolt  etre  d  la  fols  vallde  et  robuste.  La  validite  donne  au  logiciel  I'aptitude  a  accompllr  les 
functions  specifiees  dans  des  conditions  nominales,  la  robustesse  fournissant  I'aptitude  necessalre 
pour  resister  aux  agressions  previsibles  de  son  environneraent. 

Cette  conclusion  est  en  accord  avec  les  deux  approches  qualitatives  que  I'on  trouve  dans  la  litteratu- 
re  et  qul  permettent  de  construire  la  fiabilite  d'un  logiciel  tout  au  long  du  cycle  de  developpement . 

La  premiere  approche  concerne  "I'^vltement  des  fautes",  et  s'appule  sur  des  techniques  de  conformity, 
la  seconde  permet  la  *'tol€rance  aux  fautes**. 

4.3  Flability  d’un  logiciel  et  modifications 

Un  logiciel,  que  ce  soit  au  cours  de  son  dyveloppement  ou  durant  son  exploitation,  sublt  des 
modifications.  Ces  modifications  peuvent  ^tre  classees  en  deux  catygories  :  modifications  correctives 
et  modifications  innovatrices. 

Les  modifications  correctives  ont  pour  but  de  corriger  des  defauts  reconnus.  Si  tout  est  rais  en  oeuvre 
pour  que  cette  correction  n'entralne  pas  I'introductlon  de  nouveaux  defauts,  on  peut  alors  faire 
I'hypothSse  que  les  modifications  correctives  accroissent  la  f lability  du  logiciel.  Cecl  ne  peut  ce- 
pendant  ^tre  affirmy  que  pour  autant  que  I'on  dispose  de  moyens  techniques  destinys  ^  retester  un  lo¬ 
giciel  apris  correction,  qul  permettent  de  s'assurer  que  le  niveau  de  satisfaction  attaint  est  ygal  ^ 
celui  d'avant  correction.  Il  est  done  nycessaire  de  mettre  en  place  des  strategies  et  des  moyens  auto- 
matiques  de  test  qui,  en  I'ytat  actual  de  I'art,  sont  les  seules  garanties  possibles  d'une  telle  sta¬ 
bility.  Les  modifications  innovatrices  au  contralre,  n'ont  pas  pour  but  la  correction  de  dyfauts 
constatys,  mais  la  modification  des  spycif ications  externes  du  logiciel.  L'ampleur  et  la  fryquence  de 
ces  modifications  peuvent  attelndre  des  niveaux  excessifs  qui  interdlsent  au  rlalisateur  le  contrdle 
de  la  convergence  du  prodult.  Dans  tous  lea  cas,  11  est  indispensable  qu’une  procydure  forniallsye  et 
rlgoureuse  d'intygratlon  des  modifications  soit  sulvie  ,  afin  de  minimiser  I'introductlon  de  nouveaux 
dyfauts. 

4.4  Approches  qualitatives  de  la  fiability  du  logiciel 

Les  approches  qualitatives  tendent  d  construire  la  fiability  du  logiciel. Pour  ce  faire,  elles  cher- 
Ghent  d  attelndre  deux  objectifs  :  minimiser  le  nombre  de  dyfauts  rysiduels  et  minlmiser  les  effets 
des  dyfauts  rysiduels. 

Les  techniques  de  conformity,  qui  ont  pour  but  de  minlmiser  le  nombre  des  dyfauts,  sont  ygalement  ap- 
peiyes  techniques  d'yvitement  des  fautes.  Elies  se  dycomposent  en  techniques  de  pryvention  et  techni¬ 
ques  de  vyrification  et  validation.  Les  techniques  de  pryvention  regroupent  les  structures,  mythodes 
et  outils  d'aide  d  la  dyfinition,  d  la  conception  et  au  codage. 

Les  techniques  de  vyrification  et  validation  ont  yty  dycrltes  cl-dessus. 

Les  techniques  de  toiyrance  aux  fautes  tendent  d  minlmiser  les  effets  des  ddfauts.  Elles  se  dycomposent 
ygalement  en  techniques  de  pryvention  et  de  vyrification.  La  pryvention  peut  dtre  effectuye  en  utill- 
sant  les  mythodes  d'analyse  des  effets  des  erreurs  de  logiciel  (A.E.E.L.),  analogues  aux  A.M.D.E.C. 
(analyse  des  modes  de  dyfaillances,  de  leurs  effets  et  leur  critlclty)  en  matyrlel.  Les  techniques  de 
vyrification  reposent  sur  la  mise  en  oeuvre  de  mycanismes  permettant  en  cours  d'exycution  de  dytecter 
et  localiser  une  erreur,  puis  de  la  r^couvrir  par  confinement,  correction  ou  acceptation. 

4.5  Approches  quantltatlves  de  la  fiability  du  logiciel  [BOB  75  ,  MCC  77] 

Si  les  techniques  qualitatives  permettent  I'amyiloration  de  la  fiability,  elles  n'en  permettent  pas 
I'yvaluatlon  ou  la  pryvislon.  Il  va  de  sol  qu'une  approche  contractuelle  de  la  fiability  passe  non 
seulement  par  1 'assurance  de  la  quality  des  travaux  c'est-d-dlre  la  maitrlse  des  techniques  qualitati¬ 
ves,  mais  aussi  par  la  connaissance  chiffrye  de  la  quality  effectivement  observable  sur  les  prodults. 

Ce  second  type  d'approche  reste  encore,  il  faut  le  dire,  un  domaine  de  recherche  fondamentale  et  ap- 
pliquye.  Il  n’en  reste  pas  moins  que  de  nombreux  travaux  ont  yty  effectuys  sur  ce  thBme  et  que  cer¬ 
tains  semblent  Btre  proches  de  I'appllcability  Industrlelle.  Les  approches  quantltatlves  peuvent  Btre 
scindyes  entre  approche  prydictive  et  approche  aprBs  codage.  L'approche  prydlctive  s'appule  sur  des 
rysultats  de  mesure  pryievys  soit  sur  la  documentation  (Me  CALL,  BOEHM),  soit  sur  le  code  (id,  +  Me 
CABB  et  HALSTEAD).  Ces  mesures,  fournies  A  un  module  prydictif,  sont  susceptlbles  de  donner  une  Indlc- 
tion  sur  la  fiability  du  prodult  final.  Si  l'approche  peut  sembler  dlscutable  du  point  de  vue  flabi- 
llate,  elle  permet  en  revanche  de  connattre  certaines  propriytys  des  dlverses  descriptions  du  logiciel 
(des  spycif ications  externes  au  code),  propriytys  qul  refl^tent  les  probldmes  qui  seront  rencontrys. 
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L'approche  aprds  codage  se  r§partlt  ^galement  selon  deux  orientations,  la  premiere  repose  sur  des  mo¬ 
dules  d'estlmatlon  de  la  fiablllt^,  allment§s  en  donn^es  pr^lev^es  durant  les  tests  ;  ces  donn§es  peu- 
vent  Stre  relatives  au  bon  f onctlonnement  observe  (modules  de  MUSA,  LITTLEWOOD-VERRAL,  GOEL-OKUMOTO, 
...)  ou  au  taux  de  couverture  des  tests  (NELSON,  MILLS...). 

La  seconde  conslste  A  mesurer  des  intervalles  de  d^falllance  sur  le  prodult  reput§  operatlonel 
(^ventuellement  en  service  effectlf)  et  I  fournlr  ces  donnees  h  un  tnodele  d'^valuation  de  la  probabi¬ 
lity  de  boti  f onctlonnement  (modele  de  MUSA,  en  particuller) . 

L'enseoble  de  ces  approches  qualltatlves  et  quantltatlves  de  la  liability  du  loglclel  est  rysumy  sur  la 
figure  1. 


EVITEMENT  ✓ 
'DES  FAUTES 
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'VERIFICATION 
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'^qualitative' 


^.TOLERANCE 
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.  CORRECTION 
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MESURES 
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'D' ESTIMATION 
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MESURE  DE  MTTF 


FIGURE  1  :  APPROCHES  ET  TECHNIQUES  EN  FIABILITE  DU  LOGICIEL 
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5.  LE  DEVELOPPEMENT  DES  LOGlCIELS  MIRAGE  2000 


Les  loglclels  centraux  des  divers  avlons  Mirage  2000  repr^sentenc  un  exemple  d'effort  industrlel  pour 
assurer  un  degr$  ^lev^  de  flabilit§  d'un  produit  dont  le  r51e  est  essentlel  au  bon  f onct ionnement  du 
syscdme  de  navigation  et  d'armement.  Ces  logiciels  constituent  une  faraille  dont  I'archltecture  et  les 
o^canlsmes  ginSraux  sont  communs,  mals  qui  pr^sente  des  variantes  Importantes  selon  la  nature  des  mis¬ 
sions  et  des  Iquipements  affect^s  d  un  type  d'avlon«  De  faqon  i  assurer  la  quallte  des  loglclels  pro- 
duits,  tout  en  respectant  les  d§lals  tres  courts  et  les  budgets  ^tablls,  I'ESD  a  mis  en  place  une 
m^thodologie,  MINERVE^  et  des  outils  qui  assurent  son  support*  Cecl  ne  constitue  que  le  d^but  d'une 
politique  visant  S  mieux  maltriser  le  processus  de  production  de  loglclel»  politique  qui  est  pro'ong^e 
par  des  Etudes  en  g6nie  logiciel  pr§sent§es  plus  loin* 

5.1  La  mgthodologie  MINERVE  (fonaalisge  depuis  1976)  [PER  79] 

Elle  repose  sur  trols  principes  : 

-  les  travaux  sont  d6coup4s  en  phases  et  en  Stapes  caract^rls^es  par  des  actlvlt§s»  des  prodults 
et  des  responsabilit^s  clalrement  d^flnis, 

-  La  quality  des  products  ainsi  que  leurs  couts  et  d^lais  de  realisation  sont  controies  de  fa^on 
continue, 

-  Les  modifications  sont  prises  en  compte  quel  que  soit  le  degre  d*avancement  des  travaux,  selon 
une  procedure  unique  destinee  ^  eviter  toute  degradation  de  la  quallte  du  logiciel* 

MINERVE  constitue  le  manuel-quallte  du  logiciel  de  1*ESD* 

Pour  chaque  proJet,  des  dispositions  speciflques  sont  etablies  dans  le  cadre  de  MINERVE  et  en  accord 
avec  le  groupe  “quallte  du  logiciel"  ;  elles  constituent  le  plan-qualite  du  pro Jet* 

MINERVE  distingue  2  types  de  conCroles  : 

-  Contrdles  de  type  A  :  ce  sont  des  controles  Internes  au  produit  d’une  etape  ;  effectues  par  re¬ 

lecture  et  analyse  des  documents  ou  du  code,  11s  consistent  d  verifier  que  le  produit  respecte 
les  regies  pr^cis4es  dans  le  plan-qualit^  (en  partlculier  I’applicatlon  des  standards  de 
documentation,  de  codage,  d’utlllsatlon  d'outlls***)  ;  on  s’assure  ^galement  de  la  coherence 
Interne,  de  la  compl^tude,  de  la  llslbllit€  et  de  la  precision  de  chaque  produit* 

**  Contrdles  de  type  B  :  ce  sont  des  contrdles  de  cohlrence  entre  un  niveau  de  description  du  logi¬ 

ciel  et  le  niveau  antdrieur  (code  vers  la  conception,  conception  vers  la  definition)  ;  ce  type 
de  contrdle,  comme  le  pr4d€dent,  est  r^allsd  sous  forme  de  relectures  et  de  revues* 

En  outre,  ces  contrdles  Incluent  les  tests  des  programmes  qui  constituent  actuellement  le  seul 
moyen  de  verifier  que  le  comportement  effectif  du  logiciel  est  conforms  i  la  description  qui  en  a 
dt4  faite*  Ce  dernier  mode  de  contrdle  peut  dgalement  dtre  r^alisi  par  I’utilisation  de  maquettes 
ou  d’analyseurs  de  spdclf Ications* 

Le  passage  d’une  dtape  d  I'autre  est  condltlonnd  par  I’obtention  de  rdsultats  satlsfaisants  pour  ces 

deux  types  de  contrdle.  L*ensemble  des  contrdles  est  schdmatlsd  par  la  figure  2. 


La  gestion  des  modifications  dans  MINERVE  constitue  une  orlglnalltd  :  de  par  sa  procedure,  elle  intd 
gre  la  maintenance  dans  le  mdme  processus  que  le  ddveloppement* 
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La  procedure  de  modification  se  dSroule  en  deux  temps  ; 

-  Prise  en  compte  de  la  modification  :  un  constat  d'anomalle,  ou  une  demands  d*€volutlon  entratne 
la  redaction  d'une  "flche  de  modification",  qul  dolt  §tre  sufflsamment  precise  pour  que  I'en- 
semble  des  prodults  mis  en  cause  (code,  conception,  definition)  solt  determine  et  que  I'lmpact 
sur  les  coQts  et  deials  pulsse  Stre  evalue. 

-  Realisation  de  la  modification  :  deddee  en  connalssance  de  cause,  la  modification  peut  alors 
Stre  reallsee  en  respectant  la  sequence  des  etapes  concern6e8,  ce  qul  garantlt  la  coherence  de 
I'ensemble  des  prodults  ;  I'executlon  de  la  modification  est  consignee  sur  une  "flche  sulveuse". 

5.2  L'outlllage  utilise  pour  le  Mirage  2000 

L'appllcatlon  rlgoureuse  d'une  methodologle  permet  d'obtenlr  une  mellleure  qualite  des  prodults  et  une 
mellleure  mattrlse  des  codts  et  ddlals.  Elle  permet  egalement  de  dlmlnuer  les  couts  d ' Integration  et 
de  mlse  au  point  finale,  alnsl  que  ceux  de  maintenance  ulterleure.  En  revanche,  elle  met  en  evidence 
des  travaux  blen  formalises,  qul  se  prStent  dds  lors  d  une  automatlsatlon.  Id  comrae  dans  d'autres  do- 
malnes  d'actlvlte,  I'auComatlsatlon  vise  R  augmenter  la  productlvlte,  d  redulre  les  tSches  fastldleu- 
ses  et  rdpetltlves  et  d  fadllter  I'obtentlon  d'une  qualite  stable. 

L'ensemble  des  documents  prodults  est  gere  sur  des  machines  de  traitement  de  textes,  qul  sont  Inter- 
connectees  avec  I'ordlnateur  central  utilise  pour  la  production  de  programmes.  Alnsl,  les  Ingenleurs 
peuvent-lls  consulter  et  mettre  d  jour  cette  documentation  dlrectement  depuis  leur  terminal 
d'ordlnateur,  tandis  que' le  personnel  de  secretariat  dispose  d'un  materiel  adapte  d  la  salsie  massive. 
En  ce  qul  concerne  les  specifications  fonctlonnelles,  des  dlagrammes  de  decomposition  permettent  d'en 
rendre  1' apprehension  beaucoup  plus  aisee,  en  partlculler  en  matldre  de  description  de  la  hierarchle 
des  fonctlons  et  de  leurs  Interdependances. 

Pour  la  conception  du  loglclel,  I'ESD  a  d6velopp€  un  "langage  de  description  de  modules"  [CAT  83]  qul 
permet  d'exprlmer  la  structure  globale  des  programmes  et  de  decrlre  les  Interfaces  de  modules.  Cecl 
complete  le  langage  LTR-V2,  utilise  pour  I'essentlel  du  codage,  dans  le  sens  de  I'dvolutlon  actuelle 
des  langages  d  compilation  sSparde  (LTR-V3,  ADA...).  Ce  langage  est  analyse  par  un  preprocesseur  qul, 
si  la  description  fournle  est  correcte,  engendre  le  code  LTR-V2  correspondant. 

En  ce  qul  concerne  les  tests,  deux  types  d'outlls  ont  ete  developpes  : 

-  Le  langage  LOTUS,  qul  permet  I'ecrlture  symbollque  de  programmes  de  test  manlpulant  les  objets 
du  programme  d  tester  sous  leurs  noms  et  types  LTR.  LOTUS  permet  alnsl  la  formalisation  tant  des 
procedures  que  des  rSsultats  de  test. 

-  Les  bales  de  validation  de  loglclel  (B.V.L.)  [BOD  79J  qul  permettent  la  simulation  en  temps  r6el 
de  I'envlronnement  aux  bornes  du  calculateur  operatlonnel,  I'analyse  automatlque  des  rSponses  du 
loglclel  aux  stlmulls  et  la  posslbllltS  pour  un  opSrateur  de  survelller  1 'execution  et 
d'engendrer  des  evdnements  d  tout  Instant. 

Ces  deux  outlls  de  test,  qul  permettent  I'accds  aux  programmes  operatlonnels  en  symbollque  et 
avec  les  formats  externes  des  donnees,  autorisent  egalement  le  test  automatlque,  de  par  leur  ca- 
paclte  d  enreglstrer  des  scenarll  stlmulls-reponses  et  d  les  restltuer  de  faqon  autonome.  De 
tels  moyens,  blen  qu' Incomplete  au  regard  des  probldmes  lies  d  la  flablllte  du  loglclel,  nous 
paralssent  Indlspensables. 

Enfln,  les  flches  de  modification  sont  egalement  Informatlsees,  afln  de  fadllter  leur  consultation, 
leur  sulvl  et  leur  diffusion. 


6.  LES  EFFORTS  DE  L'ESD  EN  MATIERE  D' ASSURANCE-QUALITE 

L'exemple  concret  du  Mirage  2000  presente  ci-dessus  est  blen  reprlsentatif  des  efforts  menes  par  I'ESD 
en  matldre  d'assurance-quallte  du  loglclel.  II  est  egalement  important  de  noter  que  I'ensemble  des 
procedures  de  construction  de  la  qualite  est  mene  par  les  equlpes  de  realisation.  Un  "groupe  qualite 
du  loglclel"  Intervlent  en  support,  pour  alder  d  la  redaction  des  plans-'quallte,  d  la  mlse  en  oeuvre 
d'outlls  et  d  certalnes  procedures  critiques  d'evaluatlon.  Male  la  responsabllite  des  reallsateurs 
vls-d-vls  de  la  qualite  des  prodults  est  erlgee  en  prlnclpe  dlrecteur,  ce  qul  constitue  un  moteur 
puissant  d'integratlon  de  la  qualite  dans  le  processus  de  developpement .  Alnsl,  le  respect  des  rdgles 
assurant  la  qualite  n'apparait-11  pas  comme  une  contralnte  exterleure,  et  quelque  peu  antagonlste  avec 
les  objectlfs  operatlonnels. 

Afln  d'accrottre  sa  mattrlse  de  la  qualite  du  loglclel,  d  la  fols  dans  la  perspective  de  logiclels  de 
plus  en  plus  volumlneux  et  dans  le  but  d'effectuer  des  gains  de  productlvlte,  I'ESD  a  conduit  de  nom- 
breuaes  etudes  en  genie  loglclel.  Trols  d'entre  elles  constituent  la  base  de  I'effort  en  cours. 

6.1  D.L.A.O.  !  Definition  de  Loglclel  Asslstee  par  Ordlnateur  (CHE  82] 

DLAO  est  un  langage  et  un  ensemble  d'outlls  qul  constituent  un  systdme  d'alde  d  la  definition  du 
loglclel.  Cet  effort  est  soutenu  par  la  DRET.  Le  langage  DLAO  est  base  sur  un  moddle  entlte-relatlon. 
II  distingue  un  certain  nombre  d'objets,  possedant  des  sttrlbuts  et  entrant  dans  des  relations-types. 
SI  le  langage  permet  d'exprlmer  le  squelette  essentlel  de  la  specification,  11  autorlse  aussl  le  re- 
cours  d  des  formulations  en  langage  nature!  qul  permettent  d'expllclter  certains  aspects  semantiques. 
11  s'aglt  done  d'un  langage  semi-formel,  llslble  par  un  non-spedallste. 

Divers  outlls  Interactlfs  permettent  la  redaction,  la  consultation,  la  modification,  I'archlvage  et  la 
reutlllsatlon  des  constituents  d'une  specification. 


En  partlculler,  a  partlr  d  une  specification  d  orlglne,  le  systeme  pent  constltuer  des  listes  de  refe 
rences  crolsSes,  de  flux  de  donnees,  des  arbres  exprloant  les  structures  de  contrdle,  des  graphes  de 
transition  etc. . . 


6.2  IDA  :  langage  de  test  et  outlls  assoclfes  [LAM  82] 


De  l'exp£rlence  des  B.V.L.  est  n6e  1  ld6e  d  un  langage  de  test  de  loglclels  temps  reel,  adaptable  a 
divers  calculateurs  et  langages  de  programmatlon.  En  effet,  les  BVL  constituent  un  systgme  spSclflque 
aux  calculateurs  ESD  et  au  langage  LTR. 

Le  systSae  IDA  reside  sur  un  calculateur,  dlt  "machine  de  test",  rell6  au  calculateur  op6ratlonnel  par 
une  Interface  qul  permet  d'effectuer  des  operations  de  controle  :  lire,  Scrlre,  lancer,  arreter...,  et 
de  dStecter  des  evdnements  :  execution  d'une  Instruction  precise,  changement  d'etat  d'une  donnee... 

Le  langage  permet  d'ecrlre  des  programmes  de  test  qul  s'executent  sur  la  machine  de  test  et  manlpulent 
le  programme  operatlonnel  sous  test  en  utlllsant  ses  symboles,  sans  se  preoccuper  de  la  gestlon  de 
1* Interface  entre  calculateurs. 

II  est  egalement  possible  de  creer  des  outlls  de  test,  Invocablea  depuls  le  langage  et  qul  en  consti¬ 
tuent  des  "functions  standard".  Un  tel  outll  a  d6ji  6t£  dSveloppi  4  I'ESD  pour  controler  un  module  de 
comportement  de  loglclel  exprlm^  sous  forme  de  rSseaux  de  P6trl. 

Un  sous-ensemble  restrelnt  d'IDA  (hors  temps  rSel)  est  operatlonnel  dans  le  cadre  des  pro Jets  Mirage 
2000  :  LOTUS.  Un  autre  sous-ensemble,  fonctlonnant  en  temps  rSel  cette  fols  est  un  developpement . 

6.3  Evaluation  de  la  qualltS  du  loglclel  (BOE  75,  MCC  77] 


SI. les  deux  proJets  dScrlts  cl-dessua  constituent  des  efforts  4  caractere  prlnclpalement  qualltatlf, 
11s  ouvrent  egalement  des  perspectives  sur  la  quantification  de  la  quallte  du  loglclel.  DLAO  permet 
d'effectuer  des  mesures  de  compietude,  de  coherence  et  de  complexlte  sur  la  definition.  IDA  permet 
d'effectuer  des  statlstlques  sur  les  tests,  et  en  partlculler  permettralt,  en  developpant  les  outlls 
correspondents ,  la  mesure  du  taux  de  couverture. 

D'autre  part,  deux  etudes  sont  en  cours,  afln  d'etabllr  une  termlr. jlogle  et  des  rSgles  d'evaluatlon  de 
la  quallte  et  de  la  flablllte  des  loglclels.  Ces  etudes  sont  soutenues  par  la  DTEN. 

L'evaluatlon  de  la  quallte  s'appule  sur  les  travaux  de  BOEHM  et  de  Me  CALL.  Elle  s'effectue  a  partlr 
d'un  modSle  qul  deflnlt  des  facteurs  (vision  du  client)  de  quallte,  qul  s'appredent  4  partlr  de  crl- 
tSres  (vision  Interne  du  reallsateur) .  Les  crlt4res  sont  eux-memes  evalues  4  partlr  de  metrlques, 
elements  quantlflables  de  base.  Cette  approche  de  la  quallte  du  loglclel  permettra  de  deflnlr  des 
"classes  de  quallte",  qul  pourront  donner  lieu  4  engagement  contractuel. 

L'etat  de  I'art  sur  les  probldmes  de  flablllte  ayant  ete  resume  plus  haut,  cette  autre  etude  n'est  pas 
developpee  Icl. 

A  I'ESD,  les  retombees  de  ces  etudes  vont  resulter  dans  la  mlse  en  place  d 'experimentations  s'appuyant 
sur  les  moyens  dlsponibles,  sachant  que  toutes  les  mesures  ne  peuvent  8tre  reallsees  aujourd'hul 
(sinon  4  la  main,  ce  qul  est  economlquement  dlssuaslf).  Ces  experimentations  permettront  d'appreder 
I'lnterSt  et  la  falsablllte  Industrlels  de  ces  approches  quantlfiees. 
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7.  CONCLUSION 


La  certification  de  loglclel  n'est  pas  encore  realisable  au  plan  Industrlel.  Le  present  article  a  ce- 
pendant  mis  en  evidence  le  fait  que  des  techniques  et  des  outlls  ont  attelnt  un  stade  qul  permet  d'ex- 
perlmenter  des  procedures  de  certification  ;  en  effet,  pour  ce  qul  est  des  approches  quantltatlves, 
seules  des  bases  statlstlques  et  des  experimentations  permettront  de  vallder  les  procedures. 

La  demarche  proposee,  qul  conslste  4  construlre  la  quallte,  en  partlculler  la  flablllte,  d'un  loglclel 
au  long  de  son  developpement,  et  en  parallSle  4  mesurer  les  prodults  resultants,  necesslte  qu'un  ensem¬ 
ble  Integre  de  methodes  et  d'outlls  solt  mis  en  pla.':e,  afln  d'assurer  la  coherence  et  la  contlnulte 
des  actlvltes.  C'est  vers  un  tel  ensemble  que  s'orlente  I'ESD,  dans  le  cadre  de  la  methodologle 
MINERVE.  Les  divers  moyens  de  developpement  (ordlnateur  de  production  de  programmes,  machines  4  tral- 
tement  de  textes,  dlverses  stations  de  test...}  sont  Interconnectes  afln  de  constltuer  un  atelier  In¬ 
tegre  de  genie  loglclel.  Au  coeur  de  cet  atelier  sera  constltuee  4  terme  une  base  de  donnees  unique, 
banallsant  I'accSs  4  toutes  les  Informations  pour  les  divers  outlls. 

En  resume,  les  perspectives  en  matlSre  de  certification  de  loglclel  peuvent  Btre  envlsagees  comma 
etant  la  mlse  au  point  de  procedures  permettant  de  s'assurer  d'un  "degre  de  flablllte".  Four  que  ces 
procedures  pulssent  s'appllquer,  11  est  necessalre  que  la  formalisation  des  actlvltes  de  developpement 
(specification,  tests...)  solt  augmentee.  Dans  un  contexts  Industrlel,  ces  procedures  devront  naturel- 
lement  s'lntegrer  aux  operations  de  verification  et  de  validation,  qul  offrent  la  structure  technique 
et  administrative  necessalre.  Ce  besoln  d'une  vlslblllte  accrue  tant  des  actlvltes  que  des  prodults 
slgnlfle  que  la  certification  du  loglclel  ne  pourra  etre  realises  qu'en  s'appuyant  sur  la  "validation 
du  processus  de  production". 
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SUMMARY 

"The  U.S.  Air  Force  Defense  Meteorological  Satellite  Program  (DMSP)  Block  5D  satellite  uses  two  general  purpose  digital  Oight 
computers  for  control  of  the  satellite  and  launch  vehicle.  During  the  life  of  six  satellites,  various  reconfigurations  of  ihe  flight  soft¬ 
ware  were  accomplished  to  achieve  improvements  or  to  compensate  for  problems.  An  independent  verification  and  validation  (I VA V ) 
process  was  conducted  by  CSDL  on  that  flight  software  prior  to  launch  and  prior  to  uplink  of  major  software  changes.  To  accom¬ 
plish  this,  CSDL  developed  and  used  a  closed-loop  digital  simulation  of  the  mission  to  exercise  the  actual  flight  software  in  a  realistic 
environment.  This  paper  describes  this  experience,  focusing  on  how  both  the  simulation  and  the  IV&V  process  evolved  as  a  conse¬ 
quence  of  the  flight  history.  ^ 


DMSP  BLOCK  SD  CONCEPT 

The  primary  mission  of  the  U.S.  Air  Force  DMSP  is  to  gather  weather  data  formilitary  use.  Conceptually,  the  data  are  obtained 
from  a  variety  of  sensors  carried  by  3-axis  stabilized  Block  5D  satellites  circling  the  earth  at  an  altitude  of  450  nautical  miles  (833 
km)  in  near-polar  sun  synchronous  orbits.  With  this  orbit,  full  coverage  of  the  earth  is  made  by  each  satellite  in  12  hours,  while 
scanning  an  1800-nmi  (3330  km)  wide  area. 

The  primary  meteorological  payload  is  a  Westinghouse  Operational  Line  Scan  System  (OLS)  that  takes  visual  and  infrared  im¬ 
agery  for  use  in  analyzing  cloud  patterns.  The  OLS  also  manages  the  data  from  a  group  of  other  meteorological  sensors  which  can 
measure  parameters  such  as  temperature,  moisture,  ion  and  electron  densities,  and  x-ray  emissions. 

BLOCK  SD  DESCRIPTION 

The  Block  5D  satellite  is  manufactured  by  the  Government  Systems/ Astro-Electronics  Division  of  the  RCA  Corporation.  The 
satellite  is  structurally  divided  into  the  following  four  major  sections.  (See  Figure  1.) 

(1)  A  rigid,  precision  mounting  platform  holds  those  sensors  which  require  precise  alignment  relative  to  the  OLS  and  pointing 
toward  the  earth.  Among  this  equipment  are: 

(a)  One  inertial  measurement  unit  (IMU)  containing: 

(1)  Three  orthogonal,  strapdown  gyros  for  measurement  of  angular  velocity  during  launch  and  in  orbit.  A  fourth, 
skewed  gyro  provides  redundancy  in  orbit  when  selected  for  use  by  the  flight  software. 

(2)  Three  orthogonal  accelerometers  measure  specific  force  during  launch  for  navigation  of  the  launch  vehicle. 

(b)  One  strapdown,  six-slit  celestial  sensor  assembly  (CSA),  which  indicates  star  crossing  events  for  use  in  precision  atti¬ 
tude  determination. 

(c)  One  earth  sensor  assembly  (ESA),  containing  four  quadrants  which  view  the  carbon  dioxide  horizon  to  measure 
pitch  and  roll  errors  for  backup  attitude  determination. 

(d)  One  sun  sensor  unit  (SSU)  to  measure  yaw  error  for  backup  attitude  determination.  The  yaw  error  is  also  estimated 
from  the  roll  gyro  output  while  in  a  yaw-gyrocompass  submode. 

(2)  An  equipment  support  module  is  a  central  structural  section  which  encloses  much  of  the  satellite  electronics  including: 

(a)  Three  orthogonal  reaction  wheel  assemblies  (RWAs)  which  provide  attitude  control  torque.  A  fourth,  skewed  reac¬ 
tion  wheel  provides  redundancy  when  selected  for  use  by  the  flight  software. 

(b)  Two  sets,  for  redundancy,  of  dual  orthogonal  magnetic  momentum  unloading  (MMU)  coils  to  provide  low-level 
torques  through  interaction  with  the  earth's  magnetic  field. 

(c)  Two  SCP234  16-bit  CMOS  digital  computers  for  control  of  Ihe  mission. 

(d)  One  controls  interface  unit  (CIU),  a  switching  center  which  interfaces  the  flight  computers  with  the  various  satellite 
equipment. 

(3)  A  reaction  control  equipment  support  stnicture  encloses  the  spent  upper  stage  Apogee  Kick  Motor  (AKM)  and  also  con¬ 
tains: 

(a)  Eight  nitrogen  (Ni)  thrusters  which  provide  low-level  attitude  control  torque  during  launch. 

*The  activities  described  in  this  paper  occurred  during  work  performed  by  CSDL  for  Ihe  USAl-  Space  Division  under  contracts 
F0470l-74-C-0020and  F0470I-78-C-00I8. 
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(b)  Four  hydrazine  (N2H4)  thrusters  which  arc  used  for  final  velocity  trim  and,  along  with  the  nitrogen  tlirusters,  pro¬ 
vide  high-level  attitude  control  torque  during  launch. 

(4)  A  solar  array  is  rotationally  driven  about  the  satellite  pitch  axis  to  point  the  array  nonnal  toward  the  sun.  Ihe  array  of 
solar  cells  generates  electrical  power  for  distribution  to  satellite  equipment,  including  batteries,  through  a  direct  energy 
transfer  system. 


SOLAR 


Figure  1.  The  Block  5D-2  satellite. 


The  satellite  contains  S-band  communication  equipment  for  the  receipt  of  command  messages  and  computer  memory  words 
uplinked  from  the  ground  to  each  of  the  flight  computers  or  CIU.  With  this  feature,  satellite  ephemeris  information  is  periodically 
refreshed,  or  the  flight  software  can  be  reconfigured  as  desired. 

Provision  is  also  made  for  the  storage  of  meteorological  data  on  tape  recorders  and  the  S-band  downlink  of  both  meteorologi¬ 
cal  sensor  data  and  housekeeping  telemetry  data  from  both  flight  computers  and  other  equipment. 


The  first  generation  of  Block  SD  satellites,  called  5D-1  and  comprising  FI  through  F5,  were  launched  using  McDonnell-Douglas 
(MDAC)  Thor  LV-2F  boosters  and  two  upper  stages  of  solid  propellant  rocket  motors.  Ascent  guidance,  navigation,  and  control  of 
the  launch  vehicle  was  completely  controlled  by  MDAC  software  within  one  of  the  SCP234  computers.  The  launch  dates  and  life¬ 
spans  of  these  vehicles  as  of  September  1983  are  shown  below. 


Satellite 

Launch  Date 

Life  (months) 

FI 

12  Sept.  76 

36 

F2 

4  June  77 

32 

F3 

1  May  78 

65 

F4 

6  June  79 

14 

F5 

15  July  80 

0 

F6 

20  Dec.  82 

9+ 

The  current  generation,  called  5D-2,  is  somewhat  longer  and  heavier,  but  with  similar  satellite  equipment  and  appearance,  and 
is  launched  by  a  General  Dynamics  Atlas  F  Booster  and  one  upper  stage  Apogee  kick  motor.  Ascent  guidance,  navigation,  and  con¬ 
trol  (GN&C)  through  Atlas  booster  propulsion  is  provided  by  a  ground-based  radio  guidance  system.  Beyond  the  booster  portion  of 
flight,  MDAC  software  within  an  SCP234  computer  provides  full  guidance  and  control  of  the  launch  vehicle. 

After  completion  of  propulsion  and  deployment,  software  control  is  handed  over  from  MDAC  ascent  to  RCA  orbital  programs 
within  the  SCP234  flight  computers.  The  orbit  software  is  a  mixture  of  Honeywell  and  RCA  programs.  Although  Ihe  original  FI 
flight  loads  were  operable,  improvements  were  incorporated  throughout  the  5D-1  era  and,  for  5D-2,  expansion  of  the  SCP234  mem¬ 
ory  capacity  from  16  to  28  kilobytes  permitted  considerable  additional  improvements. 

Generally,  each  of  the  two  flight  computers  contains  identical  orbit  software  programs  and  is  fully  capable  of  controlling  the 
satellite  attitude,  managing  angular  momentum,  and  pointing  the  solar  array.  Normally,  both  computers  are  always  running,  have 
sequential  access  to  equipment  data,  and  both  routinely  attempt  to  command  the  various  external  satellite  devices.  However,  they 
are  each  in  different  modes  of  operation  and  only  one  computer  is  actually  connected  to  a  device  (such  as  the  reaction  wheels)  at  a 
given  time  via  the  contiols  interface  unit  (CIU).  In  the  event  of  unsatisfactory  performance,  monitoring  functions  within  the  CIU  or 
within  that  SCP234  designated  as  the  master  can  cause  automatic  changes  in  the  modes  of  operation. 

With  the  flight  computers  playing  such  a  vital  role  in  the  launch  vehicle  and  satellite  systems,  it  is  important  that  the  software 
perform  correctly.  USAF  Space  Division  policy  stipulates  that  the  integrity  of  the  flight  software  be  demonstrated  and  certified 
prior  to  flight  by  a  technical  organization  independent  of  the  system  developers.  The  focus  of  this  paper  will  be  on  CSDL's  activities 
toward  providing  independent  verification  and  validation  of  the  flight  software. 
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SOFTWARE  V&V  CONCEPTS 

It  will  be  helpful  to  first  state  some  definitions  of  the  words  "verification”  and  "validation"  as  used  with  regard  to  software. 
The  rudiments  of  a  system  development  process  are  indicated  by  Figure  2.  along  with  a  suggestion  of  the  V&V  components  asso¬ 
ciated  with  it.  In  a  modem  development  process,  the  mission  or  user  renuirements  are  documented  in  a  system  specification  so  that 
the  design  and  test  goals  are  defined  The  system  specification  must  clearly  state  the  system  requirements  and  will  generally  partition 
the  requirements  into  those  which  shall  be  met  by  either  software  or  hardware.  Software  requirements  fonn  the  basis  for  a  detailed 
design,  as  documented  in  a  software  design  specification.  The  design  is  then  implemented  by  coding  into  the  operational  software. 


SYSTEM 

SPEC 

VERIFICATION 


SOFTWARE 

SPECS 

VERIFICATION 


SOFTWARE 

VERIFICATION 


USER  OR  MISSION 

SYSTEM 

SOFTWARE 

SOFTWARE 

OPERATIONAL 

REQUIREMENTS 

SPECIFICATION 

REQUIREMENTS 

SPECIFICATIONS 

SOFTWARE 

_  SOFTWARE  I 

VALIDATION 

SYSTEM  DEVELOPMENTAL  FLOW 

_ V&V  PROCESS  CHECKING 

_ CORRECTIONS  DUE  TO  V&V 

Figure  2.  Product  development  process. 

Verification  is  that  process  of  confirming  the  traceability  and  accurate  implementation  of  the  final  product  through  the  suc¬ 
cessive  stages  of  specifications  and  procedures  which  govern  the  development  cycle.  Software  verification  determines  whether  a 
computer  program  was  developed  in  accordance  with  the  software  specification.  It  will  not  necessarily  guarantee  that  the  software  is 
usable,  only  that  it  satisfies  its  specifications. 

Software  validation  refers  to  the  process  of  determining  that  the  actual  software  will  satisfy  the  mission  requirements,  that  it 
will  perfonn  the  necessary  functions  in  the  mission  environment. 

The  most  recent  CSDL  I  V&V  cycle  for  Block  5D  was  on  F6,  the  first  of  the  5D-2  vehicles.  The  CSDL  activities,  indicated  in 
detail  in  Tables  1  and  2,  included  painstaking  analysis  of  each  line  of  code  and  realistic  exercise  of  all  flight  code  functions  on  the 
Multiprocessor  Software  Test  Facility  (MSTF)  closed-loop  simulation. 

MULTIPROCESSOR  SOFTWARE  TEST  FACILITY 

The  MSTF  is  a  closed-loop  digital  test  bed  for  the  execution  of  actual,  unmodified  Block  5D  flight  code  in  a  wide  variety  of 
scenarios  which  span  the  mission  from  prelaunch  into  orbit.  In  general,  runs  proceed  automatically  from  initial  conditions  specified 
by  the  data  base,  modified  as  desired  by  the  operator.  Almost  any  type  of  simulated  hardware  failure  condition  can  be  introduced 
by  the  operator  during  a  run. 

The  MSTF  hardware  configuration,  as  shown  in  Figure  3,  includes  two  RCA  SCP234/GT  computers  containing  the  flight  code, 
and  a  PE8/32D  host  minicomputer  containing  models  of  all  flight  vehicle  equipment  which  interact  with  the  flight  computers.  Block 
diagrams  of  the  MSTF  indicating  the  ascent  and  orbit  simulation  modules  are  shown  by  Figures  4  and  5. 

The  MSTF  was  developed  by  CSDL  to  replace  the  Software  Test  Facility  (STF)  used  for  Block  5D-1  software  validation.  The 
development  included  minimally  modifying  5D-1  hardware  models  as  required  for  5D-2,  interfacing  the  host  computer  with  RCA- 
developed  ground  test  versions  of  the  SCP234s  and  CIU,  and  completely  redesigning  the  executive  control  software.  Table  3  shows 
some  of  the  significant  differences  between  the  STF  and  the  MSTF  and  provides  information  on  the  character  of  the  simulation.  Be¬ 
cause  the  MSTF  and.  in  fact,  the  entire  V&V  process  evolved  from  an  earlier  CSDL  effort  on  5D-I ,  there  is  benefit  in  a  retrospective 
review  of  that  history. 

CSDL  SIMULATION  DEVELOPMENT  EFFORT 

The  CSDL  Block  5D  activity  for  USAF  was  initiated  in  late  1973  as  part  of  an  Independent  Dynamic  Verification  Program  to 
satisfy  the  SAMSO  Commanders  Policy  as  specified  in  SAMSO  pamphlet  800-4.  Such  a  program  requires  the  following  fundamental 
tasks: 

(1 )  Model  development  and  verification. 

(2)  Simulation  development  and  dynamic  performance  verification  by  simulation. 
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(3)  Supporting  analyses. 


Create  central  computer  data  base  files  from  in¬ 
formation  contained  in  data  base  specifications 
(such  as  numeric  value,  units,  scaling,  range, 
address) 


Pennits  automatic  comparison  of  specified  data 
against  actual  fiight  loads,  and  consistency  checking 
of  specified  infonnation 


Automatic  file  comparison,  on  a  module-by¬ 
module  basis,  of  all  flight  code  deliveries  against 
previous  versions.  Differences  are  individually 
reconciled,  and  audit  reports  issued  to  govern¬ 
ment  within  a  week 


Flight  code  assembly  listings  are  manually 
analyzed,  line-by-line,  and  the  logic  is  com¬ 
pared  against  pertinent  specifications.  Results 
reported  in  a  software  verification  memo  (SVM) 
for  each  module 

Flight  code  analysis  includes  the  generation  of 
a  highly  detailed,  as-coded  flow  diagram  fora 
module,  which  is  included  in  the  SVM 


The  verification  flow  diagrams  show  the  binary 
point  scaling  at  every  arithmetic  operation 


Software  verification  notebooks  (SVNs)  are 
compiled  for  each  flight  code  module  containing 
all  specification,  memo,  SVM,  and  file  compare 
information  relevent  to  the  module 

Automatic  file  comparison  tool  used  to  com¬ 
pare  portions  of  modified  modules  against 
previous  versions 


Analysis  uncovers  errors  in  both  coding  and  speci¬ 
fications.  Documentation  by  SVM  results  in  action 
toward  convergence  of  specifications  and  coding. 
This  verification  effort  enliances  familiarity  of  soft¬ 
ware  and  assists  in  simulation  test  planning 

The  flow  diagrams  are  useful  to  the  DMSP  com¬ 
munity,  and  demonstrate  the  level  of  the 
analyst’s  effort  (at  the  expense  of  slowing  down 
the  analysis  process).  The  diagrams  show  off- 
nominal  paths  which  should  be  tested 

Forces  analyst  to  check  for  consistency  of  scaling 
and  shows  potential  for  overflows  at  intemiediate 
operations 

The  SVN  for  each  module,  which  shows  its  complete 
history,  is  useful  to  analysts  as  a  quick  comprehen¬ 
sive  reference 


Reverification  of  modules,  required  by  (light  code 
or  specification  changes,  is  expedited  by  pennitting 
some  automatic  analysis  of  changes 


Table  2,  CSDL  validation  activity  on  Block  5D  F6. 


Current  Validation  Techniques 

Benefits 

Unmodified  flight  code,  imbedded  in  the  MSTF 
closed-loop  simulation,  is  exercised  in  a  variety 
of  mission  scenarios 

Operation  of  actual  code  demonstrated  in  a  realistic 
environment  produces  maximum  confidence  that  the 
software  is  operable.  Problems  with  the  flight  code 
automatically  manifest  themselves  by  peculiar  test 
results  independent  of  the  intention  of  the  test  planner 

For  each  test,  a  standard  network  of  flight  com¬ 
puter  breakpoints  is  set  in  off-nominal  logic 
paths 

Permits  accounting  for  paths  exercised,  (lives  analyst 
insight  into  conduct  of  test,  including  confirmation 
that  test  scenario  is  achieving  intended  results 

All  telemetry  data  issued  by  flight  computers 
from  each  test  are  stored  and  automatically  post 
processed  to  produce  plots  and  formatted  dumps 

Plots  pennit  analyst  to  at  least  quick  scan  all  data  to 
detect  anomalous  results  which  may  not  be  related  to 
the  prime  test  objective 

Internal  test  reviews  are  held  to  consider  the  re¬ 
sults  of  each  test.  Formal  data  reviews  are  later 
held  for  the  government  and  associate  contractors 

Improves  the  analysis  of  Jala  and  promotes  under¬ 
standing  of  flight  code  behavior 

A  comprehensive  test  analysis  report  is  written 
.10  days  after  the  conclusion  of  testing 

Test  results  arc  widely  distribiiteil  Ihroughoul  Ihe 

DMSP  comniunity  to  promote  understanding  of  Hie 
launch  vehicle  and  satellite  performance 
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Figure  5.  MSTF  Block  5D  orbit  modules. 


The  majority  (>75/f)  of  the  CSDL  effort  was  focused  on  modeling  and  analysis  lor  the  development  of  a  closed-loop  digital 
simulation  of  the  mission  for  use  in  flight  software  validation.  The  balance  (not  to  be  covered  in  this  paper)  was  employed  in  studies 
of  structural  and  dynamic  interactions. 

Flight  software  validation  was  to  be  restricted  to  that  software  in  the  two  KCA  SCP2.^4  computers  which  involved  in  the 
command  and  control  portion  of  the  mission.  Excluded  from  consideration  was  any  ground  support  software  or  so  'vitin  i 

OLS  which  manages  meteorological  data. 

A  Software  Test  Facility  (STF)  simulation  was  to  be  mechanized  by  (  SDL  in  existing  ei|uipment,  located  remotely  i  m 
C'SDL’s  Cambridge.  Massachusetts  site  at  the  RCA  Astro-Electronics  Division  Facility  near  Princeton.  New  Jersey.  The  equipment 
included  one  of  each  of  the  following: 

( I )  Interdata  ID70  minicomputer  (64  kbytes  memory  for  simulation  software). 


(2)  RCA  SCP2d4  flight  computer  (16  kbytes  containing  flight  software). 

(3)  CSDL  MllL  interface  device  to  connect  the  computers. 

(4)  Disc  drive  ( 10  megabytes  to  store  overlay  files  and  data). 

(5)  Magnetic  tape  unit  (to  load  computer  and  store  telemetry  data). 

(6)  Teletypewriter  ( for  operator  control  of  simulation). 

(7)  Centronix  line  printer  (for  output  data  printout). 

(8)  Card  reader  (to  input  (light  computer  contents). 


J  J 


Single,  flight-worthy  RCA  SCP2.^4  computer  with 
16  kbytes  of  memory 

Primative  software  simulation  of  the  controls  inter¬ 
face  unit 


I 

I 


MIIL  computer  interface  device  containing  funda¬ 
mental  timing  source  for  host  and  tlight  computers 

Host  computer  was  11)70  with  64  kbytes  memory, 
later  upgraded  to  PP  8  '.)2C  computer  with  1  28 
kbytes  memory 

Sequential  operation  of  SCP234  and  1D70  computers, 
limiting  operating  time  to  10-20  times  slower  than 
real  time 

Home-grown  executive  and  cannibalized  disc- 
operating  system  with  limited  features 

No  run  time  graphics 


No  capability  for  scheduling  automatic  operator 
com  mands 


No  breakpoint  capability  for  SCP234 


Checkpoints  of  simulation  contents  limited  to  28 
by  4-inegabyte  disc  system 


No  routine  storage  of  simulation  data,  except 
SCP234  telemetry  output,  on  magtape 


Contained  feature  to  command  detailed  printout 
of  all  I  'O  traffic 


Original  modeling  caused  interrupts  to  S(  P234 
from  IMC,  bS.A.  and  downlink  model  to  he 
sy  nchronous  with  model  update  times 


1  wo  ground  test  versions  of  28  kbyte  R(  A  ,S(  P2.14,  n 
with  commercial-<)uality  parts 

Ciround  test,  hardware  version  of  portions  of  the  flight 
CIU,  Contains  specialized  serial  input  and  output 
buffers 

Ciround  test  interface  unit  containing  crystal  oscillator 
timing  source  for  flight  computers 

Host  computer  is  Pli  8/321)  ininieomputer  with 
.s  1  2  kbytes  memory 


Parallel  operation  of  SC  P234  and  Pli  8  32U  com¬ 
puters,  but  forced  to  stay  within  At  of  each  other. 
As  low  as  4  times  slower  than  real  time 

Perkin-Plmer  OS32  operating  system  software  w  ith 
wide  variety  of  command  features 

Run  time  graphics  of  up  to  20  imillivariable  plots 
with  capability  of  hard  copy  onto  line  printer 


Capabilities  for  time-scheduling  operator  commands 
and  for  issuing  catalogued  sets  of  operator  commands 


Capability  to  breakpoint  all  or  any  locations  in  both 
SC'P234/CIT  computers 


Number  of  checkpoints  greatly  increased  by  use  ol 
67-megaby  te  disc 


Capability  for  history  file  creation  on  mag  tape  to 
leeord  simulation  data  and  run  events 


May  command  all,  or  only  operator-defined  subset 
of  I/O  traffic  to  conserve  ninning  time 


l-'or  more  faithful  representation,  simulation  model 
interrupts  are  scheduled  asynchronously  with  model 
update  times 


The  role  of  the  minicomputer  was  to  simulate  the  relevant  hardware  and  physical  environment  outside  the  llighl  conij’iiters 
with  sufficient  fidelity  as  to  routinely  respond  to  SCP  commands,  issue  satellite  equipment  interrupts  to  the  SCI’,  and  provide  mean¬ 
ingful  formatted  input  data  to  the  SCPs  when  requested. 

Accomplishing  this  within  64  kbytes  of  memory,  absurdly  small  by  today's  standards,  proved  to  be  quite  a  challenge,  bul  w.is 
successfully  accomplished  by  coding  in  assemhiy  language,  using  overlay  techniques,  minimizing  the  resident  operating  system  and 
repertoire  of  operator  commands. 

The  scarcity  of  SCP234  fiight  computers  resulted  in  the  inclusion  of  only  one  SCP234  in  the  S'l  T  simulation,  wlieie.is  tlie 
satellite  actually  contains  two.  Testing  in  a  single  computer  environment  was  nervously  considered  tolerable  because  the  llight  eoin- 
puters  were  not  planned  to  directly  interact,  and  would  contain  ivlenlical  orbit  fiight  code.  Some  Ihought  was  given  m  Ihe  prelnni- 
nary  simulation  design  to  simulating  a  dual  eompiiter  situation  by  se<|uenlial  storing  and  loading  Ihe  contents  of  du.il  eonipulers  to 
from  disc  storage  during  simulation  operation.  However,  the  complexities  in  preserving  timing  fidelity  and  a  terrible  penalty  on 
simulation  run  time,  reinforced  the  decision  to  make  do  with  a  single  S('P234.  As  mechanized,  the  STl  sinuil.ilion  ran  apinoxiin.ile- 
ly  10  to  20  times  slower  than  real  time  uiuler  ordinary  iiioiles  of  operation. 

A  comparison  of  STP  and  MS'fT  characteristic's  is  nnlic.ited  by  lalde  3.  Other  S  fl  and  M.S  l  f  features  of  interest  inehulc 

111  A  large  network  of  logic  which  produces  hard  copy  alert  mess.iges  upon  failure  of  reason, ihleness  or  protocol  tests.  I  his 
exposes  flight  code  ,ind  simulation  problems  which  might  otlierwise  tx-  otvsenred  by  otiserving  only  closed-loop  peilorni- 
ance. 

(2)  A  checkpointing  feature  which  permits  storage  on  disc,  on  comni.md.  ot  itie  memory  and  register  contents  ot  the  flight 
and  host  computers.  Selectively  storing  the  simnl.ition  st.ite  at  a  given  lime  greatly  facilitates  the  starting,  conlinii.ilion, 
or  rerun  of  tests. 


(3l  Provision  of  a  reference  trajectory  file  of  state  vectors  lor  ascent  which  I'crmits  aiiiomalic.  real-time  , omp.ii ison  ol 
results  against  the  designed  traiectorv. 


(4)  Positive  response  to  all  flight  eonipiitor  inpiu/oiitput  tralTie.  I’ur  special  use,  the  entire  sei|uential  I/O  stre.nn  can  lie 
printevl  for  analysis  tat  an  agonizingly  slow  rale). 

(5)  A  generous  network  of  Hags,  hiases,  anvl  scale  factors  is  included  in  hardware  models  to  facilitate  the  setup  of  satellite 
hardware  off-nominal  conditions. 

In  the  original  simulation  modeling  effort,  use  was  made  of  a  diverse  variety  of  reference  information  from  the  various  hard¬ 
ware  contractors.  At  that  time,  there  did  not  exist  a  coherent  body  of  doennientation  on  which  to  base  a  simulation  design,  [aich 
contractor  v'  as  tasked  to  review  portions  of  the  C'SDL  design  in  order  to  minimize  future  disagreements  in  the  resolution  ol  simulation- 
indicated  anomalies.  This  exercise  tended  to  benefit  all  parties  by  highlighting  system  interface  problems. 

There  was  initial  uncertainty  on  the  level  of  modeling  fidelity  rec|uired.  The  absence  of  closed-loop  simulation  facilities  in  the 
D.MSP  program  at  the  time  struck  an  interest  in  the  possible  multipurpose  use  for  the  STP'.  ('onsec|uently.  the  approach  was  taken  to 
model  at  the  highest  level  supportable  by  the  fundamental  simulation  computational  time  interval  (0.020  second  in  orbit,  and  0.010 
second  in  ascent).  The  computation  rates  were  selected  to  be  bigher  than  the  planned  (light  software  cycle  rates,  (ienerally.  model¬ 
ing  overkill  tended  to  be  appreciated  in  later  years. 

From  flight  to  flight  during  the  5D-1  era,  minor  changes  to  the  STF  were  implemented  due  to  ( I  I  dilfvrences  in  each  flight 
vehicle  and  (2)  enhancements  to  the  STF  due  to  operational  experience.  (See  Table  4.)  However,  changes  were  always  made  in  a 
manner  such  that  executable  code  would  be  downward  compatible,  so  that  the  simulation  could  be  ready  within  an  hour  in  support 
of  problem  solutions  or  any  of  the  operational  Block  .SI)  satellites. 

The  5D-1  experience  proved  the  usefulness  of  the  STF.  However,  the  lack  of  dual  SCP234s  and  the  possibility  of  unobserv¬ 
able  interactions  prompted  the  development  of  the  MSTF  currently  used  for  either  5D-1  or  5D-2. 

CSDL  VALID  ATION  EFFORT  FOR  FLIGHT  I 

Prior  to  Flight  1,  the  desire  to  conserve  program  resources  and  the  state  of  published  flight  code  specifications  and  other  docu¬ 
mentation  did  not  justify  the  tasking  of  a  formal  verification  process. 

To  achieve  maximum  confidence  in  the  success  of  FI  in  a  minimum  period  of  available  test  time  (several  months,  stretching  to 
eight  as  launch  was  delayed).  C'SDL  effort  was  concentrated  on  a  variety  of  ascent  performance  tests,  augmented  by  several  nominal 
runs  (which  exercised  approximately  80')  )  of  the  orbit  code.  Later,  with  the  satellite  in  orbit,  testing  of  the  orbit  code  could  be  con¬ 
tinued  with  the  potential  luxury  <if  reprogramming  that  code  if  bugs  were  delecteil.  The  detection  of  ascent  problems,  however, 
could  not  be  delayed  since  they  might  icsult  in  loss  of  mission. 

Several  problems  in  the  ascent  and  orbital  code  were  found  by  C'SDL  during  ihis  testing  and  resolved  prior  to  launch.  The 
most  noteworthy  was  a  hug  in  the  ascent  guidance  software  which  caused  a  catastrophic  chain  of  events  if  automatic  orbit  retarget- 
ting  were  necessitated  by  a  low-energy  vehicle  stale.  As  luck  would  have  it.  relargetling  actually  occurred  during  the  FI  launch  and 
the  satellite  achieved  a  satisfactory  orbit. 

Shortly  after  behig  placed  into  orbit,  however,  disturbance  tor>|ues  Ironi  a  nilrogen  le.ik  overwhelnunl  the  capacity  of  the  reac¬ 
tion  wheels.  The  satellite  sr  in  up  In  an  orientation  which  prevented  the  sun  ftom  illuminating  Ihe  solar  array,  causing  an  eventual 
loss  in  electrical  power. 

Table  4.  Evolution  of  sinuil.ition 
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After  approximately  three  weeks,  precession  of  the  FI  spin  vector  llnally  permitted  USAF  comiminications  witli  the  satellite. 
When  experiments  indicated  that  limited  control  of  the  spin  direction  could  be  accomplished,  a  DMSP  campaign  of  recovery  to 
operational  configuration  ensued.  The  resources  for  this  pennitted  an  STF  to  be  established  at  CSDL's  home  facility.  This  later 
proved  cnicial  when  its  ready  availability  pemiitted  an  emergency  C’SDL  redesign  of  the  FI  control  laws  to  a  roll-gyroless  configura¬ 
tion. 

Eventually,  a  number  of  flight  load  reconfigurations  were  accomplished  by  the  USAF/contractor  team,  which  resulted  in  the 
recovery  of  the  vehicle  to  operational  use,  including  a  series  of  modifications  of  the  control  laws  to  work  around  IMU  gyro  .  ilures. 
Table  5  indicates  the  major  software  reconfiguration  activities,  including  episodes  on  later  satellites. 

EVOLUTION  OF  THE  CSDL  IV&V  PROCESS 

The  IV&V  activity  evolved  from  FI  to  F6  as  a  consequence  of  Block  5D  program  history  and  the  DMSP  community  percep¬ 
tion  of  program  needs,  tempered  by  the  practical  realities  of  limited  time  and  resources.  The  evolution  is  summarized  in  Tables  6  and 
7  which  show,  by  comparison  against  the  F6  effort,  the  effort  expended  on  verification  and  validation  prior  to  each  launch. 

Table  5.  Block  5D  post-launch  software  reconfigurations. 


Spacecraft  Phenomena 


Although  a  satisfactory  orbit  was  achieved  during 
launch,  Nn  control  gas  leakage  spun  satellite  up 
to  more  than  3  rev/min.  Satellite  electrical  power 
was  lost  for  3  weeks  until  spin  vector  precessed 
sufficiently  for  solar  arrays  to  be  illuminated 


Uplinked  Software  Reconfiguration 


A  specialized  DESAT  program  was  designed  and  uplinked  to  reduce 
angular  momentum  and  negate  average  gravity  gradient  torques  using 
commutated  magnetic  torquing  controlled  by  earth  horizon  sensor 
outputs 

Recovery  programs  were  created  to  damp  nutation  of  satellite  body 
and  despin  satellite  to  a  rate  which  would  not  saturate  the  gyros  and 
be  within  the  control  capability  of  the  reaction  wheels 


The  K7G  gyros  were  damaged  by  temperature 
extremes  during  unpowered  spinning.  Large  drift 
rates  were  noted,  with  roll  gyro  drift  trending 
toward  imminent  saturation 


An  emergency  roll-gyroless  modification  was  designed  and  uplinked 
to  replace  the  roll  gyro  control  system  damping  signal  with  one 
derived  from  earth  sensor  data 


Further  deterioration  of  gyros  noted  in  buildup 
of  drift  rates 


Flight  load  reconfigured  to  implement  MOBACS.  a  pitch  momentum 
bias  control  law  not  requiring  gyro  data,  with  full  dependency  on 
earth  sensor  outputs  for  pitch  and  roll  control.  Modifications  were 
also  made  to  the  magnetic  wheel  unloading  algorithm. 


Frequent  toggling  noted  in  sign  of  magnetic 
torquers  while  in  magnetic  unloading  regions 


An  adjustment  was  made  to  the  magnetic  unloading  algorithm  to 
reduce  cycling  of  the  roll/yaw  magnetic  coil 


Computer  interactions  during  early  mission 
command  operations  caused  Ns  thrusting 
which  spun  up  the  spacecraft  in  orbit 


The  specialized  recovery  programs  developed  for  FI  were  uplinked  and 
used  to  despin  the  spacecraft  to  its  operational  configuration 


Exces.sive,  false  star  mapper  outputs  due  to 
heavy  proton  bombardment  while  over  the 
South  Atlantic 


Starfix  program  included  to  blank  out  CSA  data  while  over  the 
South  Atlantic  anomaly  region.  At  same  time,  an  opportunity  was 
taken  to  adjust  control  system  gains 


Intermittent  failure  to  zero  of  yaw  gyro 
digitizer 


Gyro  reasonableness  testing  incorporated  to  detect  prolonged  zero 
output  of  yaw  gyro  and  switch  to  use  of  redundant  skew  gyro  for 
yaw  control 


Occasional  erratic  output  iif  sun  sensor  outputs 
due  to  glint  from  appendages 


Reasonableness  testing  of  SSU  outputs  incorporated  to  reject 
spurious  data  and  change  mode  of  operation  when  yaw  error  is 


Gradual  buildup  of  roll  gyro  drift  tow.ird 
saturation 


A  two-gcro  mode  of  operation  was  uplinked  which  used  skew  gyro 
lor  roll  unless  the  yaw  gyro  output  was  considered  unreasonable.  If 
unreasonable,  the  skew  gyro  is  automatically  used  for  yaw,  and  an 
I  arth  wnsor-derived  roll  rale  was  used  for  roll  control 


Degradation  of  earth  sensor  detector  quadr.uits 
in  the  font!  of  increased  segment  output  biases 


1  he  1  SKS  program  was  modified  to  provide  for  individual  correction 
terms  lor  each  of  the  3  detector  segments  within  each  quadrant 


Desire  for  capability  of  using  N  s  lo  aulomali- 
eally  unload  reaction  wheel  angular  momentum 
Also,  additional  reasonableness  testing  of  gy  ros 


Dcsiie  to  eliminate  ascent  guidance  soflw.ire 
F6  from  orbital  flight  load  lo  prevent  its  mad 
vertent  use 


Momentum  imlo.i  ;mg  soltware  designed  lor  use  on  F4  was  uplinked 


After  successful  launch  into  orbit,  an  K-kbyte  block  of  core  con 
laming  A(iS  was  zeroeil  »>iit 


a 


F6 

lst5D-2) 


Continuation  of  detailed  study  of  flight  code 
vs.  specifications.  A  further  increase  in  simula¬ 
tion  verification  runs 


Detailed  study  of  5D-1  flight  code,  but  not 
data  base,  was  completed 


Comprehensive  study  of  5D-2  flight  code 
and  data  base  vs.  current  specifications  was 
accomplished.  Increased  emphasis  placed  on 
configuration  tracking  and  automatic  com¬ 
puter  file  comparisons 


Further  emphasis  on  orbit  peu'ormance  tests  using  abnonnal 
scenarios  and  simulated  equipment  failures.  Exhaustive  test¬ 
ing  of  new  software  (MULS)  to  employ  N-i  in  orbit  to  unload 
angular  momentum  of  reaction  wheels 


Limited  testing  of  both  ascent  and  orbital  software 


Considerable  increase  in  testing  of  both  ascent  and  orbit 
flight  code.  All  paths  of  mission-critical  software  were 
tested.  Some  dc-emphasis  of  simulation  performance 
testing  in  favor  of  verification  testing 


The  FI  CSDL  testing  experience  prior  to  launch  had  demonstrated  that  the  ascent  flight  software  would  operate  properly  in  a 
wide  range  of  situations.  While  the  orbit  testing  was  limited  to  reasonably  nominal  scenarios,  sufficient  confidence  in  the  operability 
of  the  coding  was  amassed  to  permit  a  launch.  During  the  FI  spin  down  recovery  testing  by  CSDL.  the  orbit  coding  was  subjected  to 
a  spectrum  of  anomalous  conditions  adding  to  the  confidence  in  both  the  flight  code  and  the  fidelity  of  the  STF. 

For  F2,  minimum  changes  from  FI  in  the  ascent  software  resulted  in  a  reduction  in  the  number  of  ascent  runs.  The  limited 
time  (several  months)  available  for  testing  was  prioritized  for  focus  on  new  “handback”  flight  software.  Handback  was  intended  to 
permit  the  flight  IMU  and  CTU  hardware  to  be  returned  from  orbit  to  ascent  mode  to  access  the  Ni  thrusters  to  either  dump  residual 
N2  or  to  despin  the  satellite  if  a  leak  should  occur. 

Unfortunately,  the  single  SCP234  configuration  of  the  STF  did  not  expose  a  dual  flight  computer  interaction  condition  which 
existed.  After  the  launch  of  F2,  the  new  handback  feature  was  used  in  an  attempt  to  latch,  by  Ns  thrusting,  the  solar  array  which 
had  failed  to  complete  its  deployment  sequence.  The  computer  controlling  the  handback  process  commanded  the  flight  equipment 
(IMU  and  CIU)  to  ascent  mode.  However,  the  other  computer  interferred  by  commanding  the  equipment  back  to  orbit  mode  In 
which  a  different  IMU  data  rate  and  scaling  was  used.  As  a  result,  the  satellite  was  spun  up  by  the  handback  software.  The  vehicle 
was  subsequently  restored  to  an  operational  state  using  the  special  software  loads  which  had  already  been  developed  for  the  recovery 
of  FI.  This  incident  increased  program  awareness  of  the  hazards  of  the  computer  interactions,  and  resources  were  provided  for 
CSDL  to  start  development  of  the  dual  computer  MSTF. 

During  the  launch  of  F2,  the  IMU  was  subjected  to  unusually  high  (4  sigma),  short  duration  vibrational  disturbances  at  liftoff, 
causing  software  overflows  in  the  ascent  guidance  software  (AGS).  The  consequence  was  an  improper  orbit  inclination,  affecting  the 
precessional  rate  of  the  orbit  about  the  Earth's  polar  axis.  As  a  result,  the  AGS  coding  for  F.3  was  rescaled  to  accommodate  IMU 
saturation  conditions,  and  the  CSDL  effort  was  expanded  to  increase  the  level  of  testing  and  to  initiate  a  fomial  campaign  of  de¬ 
tailed  flight  code  analysis. 

The  flight  code  analysis  involved  a  line-by-line  walk-through  of  program  assembly  listings  and  comparison  against  the  logic 
shown  in  available  specifications.  Discrepancies  between  code  and  specifications  were  reported,  but  up-to-date  specifications  for 
some  software  modules  were  not  always  existent  for  meaningful  comparisons. 
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For  F3  testing,  additional  time  and  resources  were  made  available  so  that  the  standard  repertoire  of  ascent  and  orbit  tests  was 
augmented  by  runs  in  which  special  scenarios  exereised  many  of  the  off-nominal  paths  in  the  orbit  code.  For  F'3,  automatic  post-run 
plotting  of  all  telemetry  data  was  implemented  to  facilitate  analysis  of  the  enonnous  amount  of  data  from  each  run.  Up  to  that  time, 
analysts  had  to  wade  through  piles  of  formatted  dumps  of  telemetry  data,  hand  plotting  selective  quantities  of  interest.  The  launch 
and  performance  of  F3  were  superbly  uneventful. 

With  several  useful  satellites  now  in  orbit,  time  existed  for  more  comprehensive  STF  testing  by  CSDL  of  the  F4  flight  code,  so 
a  larger  number  of  the  off-nominal  paths  were  exercised  by  performance  runs  in  a  variety  of  scenarios  (such  as  failures  of  gyros,  earth 
sensor  quadrants,  reaction  wheels,  momentum  unloading  coils  in  both  normal  and  abnormal  satellite  attitudes).  For  F4,  the  hand- 
back  code  was  redesigned  by  RCA  to  enable  the  use  of  Nt  for  automatic  unloading  of  reaction  wheel  angular  momentum  (in  parallel 
with  the  capability  already  provided  by  the  MMU  coils).  This  new  feature,  called  MULS,  was  exhaustively  tested  by  CSDL. 

The  F4  version  of  flight  code  was  essentially  frozen  for  F5  so  that  the  CSDL  F5  series  of  tests  was  limited  to  the  standard 
ascent  series  of  tests  (because  of  the  criticality  of  the  launch  portion  of  the  mission)  and  several  nominal  orbit  tests. 

Development  of  MSTF,  a  dual  SCP  simulation  for  5D-2,  was  completed  and  ready  for  use  by  CSDL  for  the  F6  V&V  activity 
with  a  new  generation  of  flight  software.  It  provided  a  number  of  new  tools  to  enhance  the  conduct  of  tests  and  analysis  of  data.  (See 
Table  3.) 

The  IV&V  methodology  employed  by  CSDL  for  F6  was  summarized  in  Tables  1  and  2.  This  methodology  included  considerable 
additional  simulation  testing,  V&V  of  the  flight  code  data  base,  routine  file  dump  comparisons  on  a  module-by-module  basis  of  all 
flight  load  deliveries,  and  semiautomatic  specification  and  code  configuration  tracking.  For  F6,  sufficient  time,  resources,  and  docu¬ 
mentation  were  available  to  verify  the  flight  code  against  meaningful  design  specifications,  validate  all  flight  code  functions  by  simu¬ 
lation,  and  exercise  all  paths  in  mission-critical  software  modules  (such  as  ascent  guidance  software  and  new  N2  momentum  unload¬ 
ing  software,  GULS)  prior  to  launch.  The  launch  was,  of  course,  successful  and  satellite  performance  conformed  to  that  predicted  by 
the  MSTF  simulation. 

CONCLUSIONS 

The  Block  5D  IV&V  effort  totally  paid  for  itself  in  the  launch  of  the  first  SD-1  vehicle.  In  subsequent  launches  and  a  variety 
of  software  reconfigurations,  it  uncovered  a  number  of  software  problems  and  generally  provided  comfort  to  the  DMSP  community. 
Additional  confidence  was  provided  as  required  by  the  program  atmosphere  by  increasing  the  level  of  IV&V. 

During  the  conduct  of  the  CSDL  Block  5D  IV&V  work  and  simulation  development  effort  which  accompanied  it,  a  number  of 
lessons  were  learned  by  the  CSDL  team  which  may  be  helpful  for  similar  work  in  the  future. 

First,  regarding  software  validation  and  verification: 

IV&V  requires  intimate  knowledge  of  the  software  and  system.  To  develop  this  expertise  and  to  ensure  mat  effective 
IV&V  is  even  possible,  the  activity  should  be  initiated  as  early  as  possible  in  the  program  development  cycle. 

(2)  Software  IV&V  is  a  systems  task  requiring  systems  knowledge  and  experience,  not  just  software  expertise. 

There  is  no  substitute  for  the  validation  technique  of  operating  the  actual  software  in  a  closed-loop  simulation.  This  pro¬ 
vides  the  highest  overall  confidence  in  the  usability  of  the  software. 

(4)  Software  validation  is  not  in  itself  sufficient;vei.ncation  is  also  required  to  find  software  problems. 

Every  opportunity  should  be  exploited  to  obtain  machine-readable  information  and  to  insert  that  data  into  a  computer 
for  it  can  be  sorted  and  manipulated  in  a  remarkable  number  of  ways. 

(6)  Frequently,  the  most  interesting  results  of  a  test  will  be  unrelated  to  the  test  objective. 

Some  iteration  of  the  IV&V  effort  can  always  be  expected  due  to  either  design  changes  or  corrections  to  problems  found 
during  V&V. 

Simulation  tools  can  be  used  in  a  variety  of  unanticipated  ways  provided  that  ready  access  to  these  facilities  is  available. 

There  are  also  some  observations  regarding  simulation  development  that  may  be  useful  for  future  efforts. 

The  documentation  of  a  computer  program  is  as  important  as  the  coding  itself,  for  the  program  will  surely  be  redesigned 
and  used  by  someone  other  than  the  original  designer  and  programmer. 

More  computer  memory  is  always  needed,  and  getting  the  most  possible  at  the  start  will  result  in  straightforward  coding 
and  lower  overall  software  development  costs. 

While  the  current  trend  is  for  virtually  exclusive  use  of  higher-order  languages  to  minimize  development  cost,  assembly 
languages  for  simulations  provide  the  benefit  of  facilitating  patching  for  special  purposes. 

(4)  Software  configuration  control  is  indispensable  for  preserving  design  integrity. 

While  there  is  a  trend  toward  elimination  of  traditional  software  flow  diagrams  in  favor  of  documentation  by  program  de¬ 
velopment  languages,  flow  diagrams  are  indispensable  in  involving  nonprogrammer  personnel  in  the  design  and  review 
process. 
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(6)  Design  assumptions  and  relerences  should  be  carefully  documented  because  they  will  surely  he  challenged,  reviewed,  and 
re-reviewed  at  some  future  time. 

(7)  Extra  fidelity  in  modeling  will  usually  have  a  payoff. 
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